Lucene search
+L

8 matches found

NVD
NVD
added 2026/07/05 2:17 a.m.12 views

CVE-2026-14690

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

7.5CVSS0.00288EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/07/05 1:30 a.m.34 views

CVE-2026-14690 SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorization

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

7.5CVSS0.00288EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 1:30 a.m.9 views

CVE-2026-14690

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

7.5CVSS6.8AI score0.00288EPSS
Exploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/25 5:21 p.m.7 views

CVE-2025-2655

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.5AI score0.00547EPSS
Exploits1References1
NVD
NVD
added 2024/06/12 4:15 p.m.25 views

CVE-2024-5896

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

9.8CVSS0.00682EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.5 views

Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which is caused by an unknown part of the saveusers function in...

9.8CVSS8AI score0.00682EPSS
Exploits1References5
NVD
NVD
added 2022/06/16 6:15 p.m.22 views

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

6.5CVSS0.00818EPSS
Exploits2References2
OSV
OSV
added 2022/06/16 6:15 p.m.5 views

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

6.5CVSS5.8AI score0.00818EPSS
Exploits2References2
Rows per page
Query Builder