Lucene search
+L

5735 matches found

CNNVD
CNNVD
added 2026/01/08 12:0 a.m.6 views

Code-Projects Intern Membership Management System SQL注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. Code-Projects Intern Membership Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter Username in the...

9.8CVSS7.9AI score0.00385EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.16 views

PT-2026-1975

Name of the Vulnerable Software and Affected Versions code-projects Intern Membership Management System version 1.0 Description A flaw exists in code-projects Intern Membership Management System 1.0 where manipulation of the Username argument in the file '/intern/admin/add admin.php' can lead to ...

5.8CVSS5.1AI score0.0032EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.8 views

Code-Projects Intern Membership Management System SQL注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system . Code-Projects Intern Membership Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter activityid in...

7.2CVSS5.7AI score0.00318EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.7 views

Projects We develop 安全漏洞

Projects We develop is an event management software by Puneeth Reddy H C Individual Developer. A security vulnerability exists in Projects We develop version 1.0, which stems from the incorrect manipulation of the parameter proId in the file master/reviewaction.php, which could lead to an SQL...

9.8CVSS7.4AI score0.00406EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.9 views

Code-Projects Intern Membership Management System SQL注入漏洞

Intern Membership Management System is an intern membership management system. The Intern Membership Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter Username in the file /intern/admin/addadmin.php for externally entered SQL...

7.2CVSS5.9AI score0.0032EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.7 views

Code-Projects Intern Membership Management System SQL注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system . Code-Projects Intern Membership Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter adminid in the...

7.2CVSS5.7AI score0.00396EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.17 views

PT-2026-1972

Name of the Vulnerable Software and Affected Versions code-projects Intern Membership Management System version 1.0 Description A security issue exists in code-projects Intern Membership Management System version 1.0. The issue involves the manipulation of the admin id argument within an unknown...

7.2CVSS4.9AI score0.00375EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.6 views

Code-Projects Intern Membership Management System SQL注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system . Code-Projects Intern Membership Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter adminid in the...

7.2CVSS5.7AI score0.00318EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.11 views

Code-Projects Intern Membership Management System SQL注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system . Code-Projects Intern Membership Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter adminid in the...

7.2CVSS5.7AI score0.00375EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.16 views

PT-2026-1978

Name of the Vulnerable Software and Affected Versions code-projects Intern Membership Management System version 1.0 Description A security issue exists in code-projects Intern Membership Management System 1.0. The problem involves the processing of the file '/intern/admin/delete admin.php'...

7.2CVSS4.8AI score0.00396EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.16 views

titra 访问控制错误漏洞

titra is a time tracking project from kromit open source. An access control error vulnerability exists in titra version 0.99.49 and earlier, which stems from improper access control and could lead to a user viewing and editing time entries in unauthorized private projects...

8.1CVSS6.3AI score0.00249EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/07 11:10 p.m.3 views

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

6.8CVSS6.3AI score0.00249EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/01/07 11:10 p.m.51 views

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

6.8CVSS0.00249EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/07 11:10 p.m.25 views

CVE-2026-21694

Titra (open‑source time tracking) has an Improper Access Control in versions 0.99.49 and earlier, enabling users to view/edit other users’ time entries in private projects. The issue affects the Titra APIs and is fixed in version 0.99.50. No exploitation details are provided in the sources; advis...

8.1CVSS6.3AI score0.00249EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/01/07 11:10 p.m.7 views

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

6.8CVSS6.5AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:54 a.m.20 views

CVE-2025-1540

An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."...

4.2CVSS6.4AI score0.0023EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:27 a.m.10 views

CVE-2019-12434

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...

4.3CVSS6.5AI score0.00751EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.20 views

CVE-2025-1209

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is the function searchuser of the file /searchresualts.php. The manipulation of the argument firstname/lastname leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS6.1AI score0.00327EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.17 views

CVE-2025-1956

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS7.8AI score0.00607EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.9 views

PT-2026-1693

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.4 through 18.5.4 GitLab CE/EE versions 18.6 through 18.6.2 GitLab CE/EE versions 18.7 through 18.7.0 Description An authenticated user with specific permissions could remove all project runners from unrelated projects ...

5.5CVSS6.3AI score0.00398EPSS
SaveExploits0References15
Rows per page
Query Builder