Lucene search
+L

15314 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•3 views

CVE-2026-5325: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...

5.1CVSS3.8AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/01 11:01 p.m.•15 views

CVE-2026-5206

A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Paymentid/Amount/customerid/paymenttype/customername leads to sql injection. Remote exploitation...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/01 5:39 p.m.•20 views

CVE-2026-5203

A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the...

5.8CVSS5.5AI score0.00461EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/01 6:16 a.m.•28 views

CVE-2026-5256

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS0.00572EPSS
SaveExploits1References5
NVD
NVD
•added 2026/04/01 6:16 a.m.•28 views

CVE-2026-5255

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

6.1CVSS0.00459EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/01 6:00 a.m.•9 views

CVE-2026-5257 code-projects Simple Laundry System Parameter delstaffinfo.php sql injection

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS6.9AI score0.00572EPSS
SaveExploits1References5
CVE
CVE
•added 2026/04/01 6:00 a.m.•33 views

CVE-2026-5257

The CVE-2026-5257 entry concerns code-projects Simple Laundry System 1.0. The vulnerability affects the Parameter Handler component, specifically the /delstaffinfo.php file, where manipulating the userid parameter leads to a SQL injection. The issue is exploitable remotely, and public disclosures...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2026/04/01 6:00 a.m.•9 views

CVE-2026-5257

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/04/01 6:00 a.m.•13 views

EUVD-2026-17820

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/04/01 6:00 a.m.•50 views

CVE-2026-5257 code-projects Simple Laundry System Parameter delstaffinfo.php sql injection

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS0.00572EPSS
SaveExploits1References5
CVE
CVE
•added 2026/04/01 6:00 a.m.•37 views

CVE-2026-5256

CVE-2026-5256 affects code-projects Simple Laundry System 1.0. The vulnerability is in the Parameter Handler’s modify.php, where manipulation of the firstName parameter leads to SQL injection. Remote exploitation is possible, and the exploit has been published and may be used. The available conne...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2026/04/01 6:00 a.m.•8 views

CVE-2026-5256

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/04/01 6:00 a.m.•16 views

EUVD-2026-17819

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/01 6:00 a.m.•7 views

CVE-2026-5256 code-projects Simple Laundry System Parameter modify.php sql injection

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.9AI score0.00572EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/04/01 5:15 a.m.•51 views

CVE-2026-5255 code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

5.3CVSS0.00459EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/04/01 5:15 a.m.•7 views

CVE-2026-5255

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

5.3CVSS4.4AI score0.00459EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/04/01 5:15 a.m.•54 views

CVE-2026-5255

CVE-2026-5255 affects code-projects Simple Laundry System 1.0, specifically an issue in the Parameter Handler’s delstaffinfo.php where manipulating the userid parameter triggers cross-site scripting. The vulnerability can be exploited remotely, and the exploit is public, indicating potential real...

6.1CVSS3.8AI score0.00459EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/01 5:00 a.m.•12 views

CVE-2026-5179

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/01 5:00 a.m.•14 views

CVE-2026-5180

A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=login2. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•13 views

PT-2026-29475

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References6
Rows per page
Query Builder