Lucene search
+L

95 matches found

EUVD
EUVD
•added 2026/10/22 12:31 a.m.•18 views

EUVD-2026-107669

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

7.5CVSS6.8AI score0.00537EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/21 11:17 p.m.•15 views

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

7.5CVSS0.00537EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 10:15 p.m.•10 views

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

7.5CVSS6.8AI score0.00537EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 10:15 p.m.•52 views

CVE-2026-114439

The oretnom23 php-travel-agency-system is vulnerable to missing authentication within the Session Handler component, specifically affecting the admin/session.php file. An attacker can perform a remote attack by manipulating the user_id argument. While the exploit has been publicly disclosed, the ...

7.5CVSS6.8AI score0.00537EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 10:15 p.m.•28 views

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

7.5CVSS0.00537EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/21 10:15 p.m.•31 views

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

6.9CVSS5.5AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•22 views

PT-2026-120842

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument user id can lead to missing authentication. It is possible to launch...

7.5CVSS6.8AI score0.00537EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/10/21 12:00 a.m.•13 views

oretnom23 php-travel-agency-system authorization issue vulnerability

The oretnom23 php-travel-agency-system contains an authorization issue vulnerability. This vulnerability stems from improper handling of the userid parameter in the admin/session.php file within the Session Handler component, potentially leading to missing authentication checks...

7.5CVSS7.2AI score0.00537EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/13 6:16 a.m.•17 views

CVE-2026-108969

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS0.00304EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 5:15 a.m.•18 views

EUVD-2026-98292

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS6.6AI score0.00304EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 5:15 a.m.•50 views

CVE-2026-108969 itsmeravitejak Online-Examination-System Session session.php checkLogin comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS0.00304EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/13 5:15 a.m.•30 views

CVE-2026-108969 itsmeravitejak Online-Examination-System Session session.php checkLogin comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

6.9CVSS6.6AI score0.00304EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/10/13 5:15 a.m.•17 views

CVE-2026-108969 itsmeravitejak Online-Examination-System Session session.php checkLogin comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS6.6AI score0.00304EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 5:15 a.m.•42 views

CVE-2026-108969

A security vulnerability exists in the Session Handler component of the itsmeravitejak Online-Examination-System (up to commit e6208e630b14657999bbfe4c9912302d2a1e2449). The flaw is located in the Session::checkLogin function within the include/session.php file, where manipulation of the cookname...

7.5CVSS6.6AI score0.00304EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•16 views

CVE-2026-108969: Incorrect Comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS6.7AI score0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•24 views

PT-2026-111282

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS6.7AI score0.00304EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/10/12 4:00 p.m.•19 views

Ravi Teja Online-Examination-System Processing Logic Vulnerability

Ravi Teja Online-Examination-System has a processing logic vulnerability. This vulnerability stems from the Session::checkLogin function in the include/session.php file within the Session Handler component. The function manipulates the parameters cookname/cookid, leading to incorrect comparisons...

7.5CVSS7.2AI score0.00304EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/04 11:17 a.m.•20 views

CVE-2026-85512

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00495EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/04 10:15 a.m.•28 views

CVE-2026-85512

SourceCodester Class and Exam Timetabling System 1.0 is affected by a missing authorization vulnerability in the file /admin/session.php . The ID parameter can be manipulated by an unauthenticated remote attacker to bypass access controls. The CVSS 3.1 score is 7.3 (HIGH) with low impact across c...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 10:15 a.m.•58 views

CVE-2026-85512 SourceCodester Class and Exam Timetabling System session.php authorization

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00495EPSS
SaveExploits0References6
Rows per page
Query Builder