Lucene search
+L

582 matches found

Kitploit
Kitploit
•added 2026/10/26 7:47 p.m.•21 views

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-and-CVE-2023-24204 Introduction In the ever-evolving landscape of cybersecurity, web applications remain a prime target for attackers seeking to exploit vulnerabilities. Recently, two critical vulnerabilities were discovered in the SourceCodester Simple Customer Relationship...

5.4CVSS7AI score0.00639EPSS
SaveExploits3
NVD
NVD
•added 2026/10/13 4:17 p.m.•14 views

CVE-2026-109605

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::saveuser of the file adminclass.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be...

7.5CVSS0.00354EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 3:45 p.m.•41 views

CVE-2026-109605 SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::saveuser of the file adminclass.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be...

7.5CVSS0.00354EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 3:45 p.m.•19 views

CVE-2026-109605

A security vulnerability exists in SourceCodester Simple Cafe Billing System 1.0 within the User Management component. Specifically, the Action::save_user function in the admin_class.php file is susceptible to improper authorization when the Type argument is manipulated. This flaw allows for remo...

7.5CVSS6.9AI score0.00354EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-109605: Improper Authorization

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::saveuser of the file adminclass.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be...

7.5CVSS6.9AI score0.00354EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/06 9:17 a.m.•14 views

CVE-2026-105808

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

5.1CVSS0.00263EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/06 9:17 a.m.•13 views

CVE-2026-105809

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS0.00348EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/06 8:16 a.m.•16 views

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/06 8:15 a.m.•22 views

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 8:15 a.m.•15 views

EUVD-2026-93226

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 8:15 a.m.•36 views

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS0.00348EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/06 8:15 a.m.•14 views

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 8:00 a.m.•40 views

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

5.1CVSS0.00263EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/06 8:00 a.m.•23 views

CVE-2026-105808

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within the clean function of the searchresults.php file. An attacker can perform a remote manipulation of the searchbox argument to execute the XSS attack. The exploit h...

5.1CVSS3.7AI score0.00263EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/06 8:00 a.m.•14 views

EUVD-2026-93224

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

5.1CVSS3.7AI score0.00263EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/06 7:30 a.m.•12 views

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/06 7:30 a.m.•25 views

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 7:30 a.m.•39 views

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 7:30 a.m.•13 views

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-105809: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References3
Rows per page
Query Builder