Lucene search
+L

8 matches found

NVD
NVD
added 2026/07/05 2:17 a.m.18 views

CVE-2026-14690

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

7.5CVSS0.00294EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 1:30 a.m.11 views

CVE-2026-14690

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

7.5CVSS6.8AI score0.00294EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/05 1:30 a.m.44 views

CVE-2026-14690 SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorization

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

7.5CVSS0.00294EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/03/25 5:21 p.m.10 views

CVE-2025-2655

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.5AI score0.00547EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/12 4:15 p.m.27 views

CVE-2024-5896

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

9.8CVSS0.00682EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.15 views

Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which is caused by an unknown part of the saveusers function in...

9.8CVSS8AI score0.00682EPSS
SaveExploits1References5
OSV
OSV
added 2022/06/16 6:15 p.m.6 views

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

6.5CVSS5.8AI score0.00836EPSS
SaveExploits2References2
NVD
NVD
added 2022/06/16 6:15 p.m.24 views

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

6.5CVSS0.00836EPSS
SaveExploits2References2
Rows per page
Query Builder