Lucene search
+L

75 matches found

NVD
NVD
•added 2026/09/04 11:17 a.m.•13 views

CVE-2026-85512

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00495EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 10:15 a.m.•43 views

CVE-2026-85512 SourceCodester Class and Exam Timetabling System session.php authorization

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00495EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/04 10:15 a.m.•17 views

CVE-2026-85512

SourceCodester Class and Exam Timetabling System 1.0 is affected by a missing authorization vulnerability in the file /admin/session.php . The ID parameter can be manipulated by an unauthenticated remote attacker to bypass access controls. The CVSS 3.1 score is 7.3 (HIGH) with low impact across c...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/04 10:15 a.m.•18 views

CVE-2026-85512 SourceCodester Class and Exam Timetabling System session.php authorization

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 10:15 a.m.•12 views

EUVD-2026-70995

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS7.2AI score0.00495EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-85512: Missing Authorization

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS7AI score0.00495EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•15 views

PT-2026-85473

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS7.2AI score0.00495EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•3 views

CVE-2026-9603: Missing Authorization

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulation of the argument ID leads to missing authorization. Remote exploitation of the attack is possible. The exploit has...

6.9CVSS6.3AI score0.00547EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•2 views

CVE-2025-66918: Improper Input Validation

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2005-2616

Malware in sbrugna...

7.5CVSS6.4AI score0.01283EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2005-0301

Malware in sbrugna...

5CVSS6.4AI score0.01723EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2005-3958

Malware in sbrugna...

7.5CVSS6.4AI score0.01397EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2011-4744

Malware in sbrugna...

6.8CVSS6.4AI score0.01104EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-5247

Malware in sbrugna...

6.5CVSS6.4AI score0.02567EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/08/21 4:02 p.m.•15 views

CVE-2025-9307 PHPGurukul Online Course Registration session.php sql injection

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS7.5AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•3 views

CVE-2025-9307: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/30 2:15 p.m.•17 views

CVE-2025-6910

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been classified as critical. This affects an unknown part of the file /session.php. The manipulation of the argument session leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS0.00397EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/30 2:02 p.m.•30 views

CVE-2025-6910 PHPGurukul Student Record System session.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been classified as critical. This affects an unknown part of the file /session.php. The manipulation of the argument session leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.00397EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/30 2:02 p.m.•184 views

CVE-2025-6910 PHPGurukul Student Record System session.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been classified as critical. This affects an unknown part of the file /session.php. The manipulation of the argument session leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.8AI score0.00397EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/30 2:02 p.m.•55 views

CVE-2025-6910

CVE-2025-6910 affects PHPGurukul Student Record System v3.2, with a SQL injection in the /session.php file exposed via manipulation of the session parameter. The vulnerability is exploitable remotely and is corroborated by multiple sources in connected documents, which consistently describe an un...

8.8CVSS7.6AI score0.00397EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder