Lucene search
+L

5343 matches found

Vulnrichment
Vulnrichment
•added 2026/04/28 2:15 p.m.•6 views

CVE-2026-7283 SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function saveexpired of the file /ajax.php?action=saveexpired. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit ha...

5.8CVSS5.1AI score0.00332EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 12:16 p.m.•12 views

CVE-2026-7266

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function saveorder of the file /admin/ajax.php?action=saveorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public an...

6.5CVSS0.00316EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 12:16 p.m.•14 views

CVE-2026-7268

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function savecategory of the file /admin/ajax.php?action=savecategory. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/04/28 11:15 a.m.•33 views

CVE-2026-7268

SourceCodester Pizzafy Ecommerce System 1.0 is affected. The vulnerability exists in the save_category function of /admin/ajax.php?action=save_category, where manipulating the Name parameter leads to SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. The...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/04/28 11:15 a.m.•48 views

CVE-2026-7268 SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function savecategory of the file /admin/ajax.php?action=savecategory. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS0.00333EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/04/28 11:15 a.m.•10 views

CVE-2026-7268

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function savecategory of the file /admin/ajax.php?action=savecategory. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/04/28 11:15 a.m.•11 views

EUVD-2026-26034

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function savecategory of the file /admin/ajax.php?action=savecategory. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/04/28 10:45 a.m.•8 views

CVE-2026-7266

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function saveorder of the file /admin/ajax.php?action=saveorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public an...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/28 10:45 a.m.•54 views

CVE-2026-7266 SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function saveorder of the file /admin/ajax.php?action=saveorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public an...

6.5CVSS0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/28 10:45 a.m.•6 views

CVE-2026-7266 SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function saveorder of the file /admin/ajax.php?action=saveorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public an...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 10:45 a.m.•17 views

EUVD-2026-26032

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function saveorder of the file /admin/ajax.php?action=saveorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public an...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/28 10:45 a.m.•56 views

CVE-2026-7266

SourceCodester Pizzafy Ecommerce System 1.0 is affected by a SQL injection in the admin/ajax.php?action=save_order function via the ID parameter. The vulnerability can be exploited remotely and publicly; exploitation is noted as PROOF-OF-CONCEPT. Impact is described as low for confidentiality, in...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 2:16 a.m.•17 views

CVE-2026-7213

A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...

7.5CVSS0.00587EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 1:30 a.m.•19 views

EUVD-2026-25966

A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...

7.5CVSS7.1AI score0.00587EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/28 1:30 a.m.•49 views

CVE-2026-7213 ef10007 MLOps_MCP save_file Tool fastmcp_server.py path traversal

A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...

7.5CVSS0.00587EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•18 views

SourceCodester Pizzafy Ecommerce System 跨站脚本漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a cross-site scripting vulnerability. This vulnerability arises from the saveorder function in the file...

4.8CVSS5.6AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•16 views

PT-2026-35712

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save category of the file /admin/ajax.php?action=save category. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•23 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a vulnerability related to SQL injection, which stems from the savecategory function in the admin/ajax.php?action=savecategory...

6.5CVSS6.7AI score0.00333EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•20 views

PT-2026-35741

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save expired of the file /ajax.php?action=save expired. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit...

5.8CVSS5.1AI score0.00332EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•20 views

SourceCodester Pizzafy Ecommerce System 跨站脚本漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System contains a cross-site scripting vulnerability. This vulnerability arises from the parameter Name in the savemenu function located in...

4.8CVSS5.6AI score0.0035EPSS
SaveExploits0References2
Rows per page
Query Builder