Lucene search
+L

1222 matches found

Vulnrichment
Vulnrichment
•added 2026/03/12 8:02 a.m.•5 views

CVE-2026-4014 itsourcecode Cafe Reservation System Registration signup.php sql injection

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00584EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/12 8:02 a.m.•41 views

CVE-2026-4014 itsourcecode Cafe Reservation System Registration signup.php sql injection

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is...

7.5CVSS0.00584EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/12 8:02 a.m.•27 views

CVE-2026-4014

The CVE-2026-4014 entry affects itsourcecode Cafe Reservation System 1.0, specifically the Registration module’s signup.php file. A manipulation of the Username argument enables SQL injection, allowing remote exploitation. Multiple sources (NVD, Red Hat, EUVD, CVE lists, and security trackers) af...

9.8CVSS5.7AI score0.00584EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/12 12:00 a.m.•17 views

PT-2026-24936

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00584EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2026/03/12 12:00 a.m.•18 views

itsourcecode Cafe Reservation System SQL注入漏洞

itsourcecode Cafe Reservation System is an open-source coffee reservation system developed by itsourcecode. Version 1.0 of the system has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the Username parameter in the /curvus2/signup.php file within the Registrati...

9.8CVSS7.2AI score0.00584EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/03/09 7:53 p.m.•13 views

CVE-2026-3744

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valregpasswdation of the file signup.php. The manipulation of the argument regpasswd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

9.8CVSS5.8AI score0.00584EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/08 3:30 p.m.•13 views

EUVD-2026-10247

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valregpasswdation of the file signup.php. The manipulation of the argument regpasswd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

7.5CVSS6.9AI score0.00584EPSS
SaveExploits1References7
OSV
OSV
•added 2026/03/08 3:15 p.m.•12 views

CVE-2026-3744

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valregpasswdation of the file signup.php. The manipulation of the argument regpasswd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

9.8CVSS5.7AI score0.00584EPSS
SaveExploits1References6
NVD
NVD
•added 2026/03/08 3:15 p.m.•19 views

CVE-2026-3744

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valregpasswdation of the file signup.php. The manipulation of the argument regpasswd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

9.8CVSS0.00584EPSS
SaveExploits1References6
CVE
CVE
•added 2026/03/08 3:02 p.m.•34 views

CVE-2026-3744

CVE-2026-3744 affects code-projects Student Web Portal 1.0. The vulnerability is in the function valreg_passwdation of signup.php, where the reg_passwd argument can be manipulated to trigger a SQL injection. It is a remote, publicly disclosed exploit (PoC present in multiple sources). The issue i...

9.8CVSS6.9AI score0.00584EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2026/03/08 3:02 p.m.•47 views

CVE-2026-3744 code-projects Student Web Portal signup.php valreg_passwdation sql injection

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valregpasswdation of the file signup.php. The manipulation of the argument regpasswd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

7.5CVSS0.00584EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/03/08 3:02 p.m.•16 views

CVE-2026-3744 code-projects Student Web Portal signup.php valreg_passwdation sql injection

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valregpasswdation of the file signup.php. The manipulation of the argument regpasswd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

7.5CVSS5.8AI score0.00584EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•27 views

PT-2026-23950

Name of the Vulnerable Software and Affected Versions code-projects Student Web Portal version 1.0 Description A flaw exists in the Student Web Portal that allows for remote sql injection. The issue is located in the valreg passwdation function of the signup.php file. The reg passwd argument can ...

9.8CVSS7.1AI score0.00584EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•24 views

Code-Projects Student Web Portal SQL注入漏洞

Code-Projects Student Web Portal is an open-source student portal developed by Code-Projects. Version 1.0 of Code-Projects Student Web Portal has a SQL injection vulnerability, which stems from the handling of the regpasswd parameter in the signup.php file, potentially leading to SQL injection...

9.8CVSS7.2AI score0.00584EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2026/03/03 1:48 a.m.•21 views

CVE-2025-66880

Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via the LoginComp Module 2093 and SignupComp Module 2094 modules...

6.1CVSS6.3AI score0.00275EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/02 12:00 a.m.•13 views

EUVD-2025-208170

Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via the LoginComp Module 2093 and SignupComp Module 2094 modules...

6.1CVSS6.3AI score0.00275EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/26 4:16 a.m.•14 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/02/25 6:31 a.m.•17 views

EUVD-2026-8618

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References6
OSV
OSV
•added 2026/02/25 5:17 a.m.•11 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.7AI score0.00607EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/25 5:17 a.m.•22 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS0.00607EPSS
SaveExploits1References5
Rows per page
Query Builder