20009 matches found
CVE-2026-36944: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/viewdetails.php...
CVE-2026-36943: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/managerepair.php...
CVE-2026-36950: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projectsperdepartment.php...
CVE-2026-6188: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=deletesales. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and...
CVE-2026-36945: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manageclient.php...
CVE-2026-36942: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manageactivity.php...
CVE-2026-36941: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manageroom.php...
CVE-2026-36923: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
CVE-2026-36873: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadadmin.php...
CVE-2026-36872: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadbook.php...
CVE-2026-36919: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...
SourceCodester Online Reviewer System 安全漏洞
The SourceCodester Online Reviewer System is an open-source online review system developed by SourceCodester. Version 1.0 of the SourceCodester Online Reviewer System contains a security vulnerability, which stems from an SQL injection vulnerability in the...
CVE-2026-36919
The SourceCodester Online Reviewer System v1.0 is vulnerable to an SQL Injection flaw located in the /system/system/admins/assessments/examproper/exam-update.php file. The vulnerability stems from the improper neutralization of special elements used in an SQL command. While the exact technical ro...
CVE-2026-36937
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/viewdetails.php...
CVE-2026-36937
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/viewdetails.php...
CVE-2026-36937
Sourcecodester Online Resort Management System v1.0 is vulnerable to an SQL injection flaw within the /orms/admin/reservations/view_details.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command. While the specific technical impact and reme...
CVE-2026-36952
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/managecurriculum.php...
PT-2026-32400
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...
