Lucene search
+L

1435 matches found

NVD
NVD
added 2026/01/05 11:17 a.m.10 views

CVE-2026-0586

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out...

6.1CVSS0.00312EPSS
SaveExploits1References6
OSV
OSV
added 2026/01/05 10:15 a.m.8 views

CVE-2026-0583

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely...

9.8CVSS5.7AI score0.00371EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/05 10:15 a.m.9 views

CVE-2026-0584

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/leftcart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS0.00315EPSS
SaveExploits1References6
OSV
OSV
added 2026/01/05 10:15 a.m.5 views

CVE-2026-0584

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/leftcart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS5.7AI score0.00315EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/05 10:15 a.m.18 views

CVE-2026-0583

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely...

9.8CVSS0.00371EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2026/01/05 10:2 a.m.5 views

CVE-2026-0585 code-projects Online Product Reservation System GET Parameter order_view.php sql injection

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /orderview.php of the component GET Parameter Handler. Such manipulation of the argument transactionid leads to sql injection. The attack can be executed...

7.5CVSS6.7AI score0.00379EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/01/05 9:32 a.m.38 views

CVE-2026-0584 code-projects Online Product Reservation System left_cart.php sql injection

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/leftcart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS0.00315EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2026/01/05 9:32 a.m.4 views

CVE-2026-0584 code-projects Online Product Reservation System left_cart.php sql injection

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/leftcart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.5AI score0.00315EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/05 9:22 a.m.9 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS7.2AI score0.00374EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/01/05 9:2 a.m.4 views

CVE-2026-0583 code-projects Online Product Reservation System User Login login.php sql injection

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely...

7.5CVSS6.9AI score0.00371EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/05 6:19 a.m.10 views

CVE-2026-0575

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. Th...

7.5CVSS6.9AI score0.00374EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.5 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from incorrect manipulation of the parameter id/qty in the file...

9.8CVSS6.9AI score0.00315EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.6 views

Code-Projects Online Product Reservation System 代码注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A code injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from an incorrect manipulation of the parameter cat in the file...

6.1CVSS4.9AI score0.00312EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.18 views

PT-2026-1286

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A security flaw exists in the User Registration Handler component of code-projects Online Product Reservation System version 1.0. The issue involves a SQL injection that c...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.16 views

PT-2026-1273

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in code-projects Online Product Reservation System 1.0 that allows for cross site scripting. The issue is located in an unknown function within the...

6.1CVSS5.3AI score0.00312EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.12 views

PT-2026-1238

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A security flaw exists in code-projects Online Product Reservation System version 1.0. The issue is located in the file app/user/login.php within the User Login component...

9.8CVSS6.9AI score0.00371EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.10 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. Code-Projects Online Product Reservation System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameters fname/lname/...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/04 1:15 p.m.15 views

CVE-2026-0579

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The atta...

9.8CVSS0.00374EPSS
SaveExploits1References6
CVE
CVE
added 2026/01/04 12:32 p.m.30 views

CVE-2026-0579

CVE-2026-0579 affects Code-Projects Online Product Reservation System 1.0. A SQL injection exists in the POST Parameter Handler for /handgunner-administrator/edit.php, triggered by manipulating the arguments prod_id, name, price, model, or serial. The vulnerability is exploitable remotely and pub...

9.8CVSS7.2AI score0.00374EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2026/01/04 12:32 p.m.30 views

CVE-2026-0579 code-projects Online Product Reservation System POST Parameter edit.php sql injection

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The atta...

7.5CVSS0.00374EPSS
SaveExploits1References6
Rows per page
Query Builder