Lucene search
+L

20033 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•8 views

CVE-2026-2984: Improper Resource Shutdown or Release

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/dropuser.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and...

6.9CVSS6.4AI score0.00667EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/23 12:00 a.m.•34 views

SourceCodester Student Result Management System 安全漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System contains a security vulnerability. This vulnerability stems from improper handling of parameter IDs in...

6.9CVSS6.6AI score0.00667EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•27 views

PT-2026-21511

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop user.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available an...

6.9CVSS5.3AI score0.00667EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•8 views

CVE-2026-2983: Improper Access Control

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

9.8CVSS6.8AI score0.00713EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•20 views

PT-2026-21510

Name of the Vulnerable Software and Affected Versions SourceCodester Student Result Management System version 1.0 Description A flaw exists in the Student Result Management System that allows for improper access controls. This is due to manipulation of the File argument within an unknown function...

9.8CVSS6.9AI score0.00713EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/02/23 12:00 a.m.•27 views

SourceCodester Student Result Management System 访问控制错误漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a vulnerability related to access control. This vulnerability stems from improper handling of...

9.8CVSS7.1AI score0.00713EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/02/22 9:16 a.m.•17 views

CVE-2026-2938

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.3CVSS5.4AI score0.0058EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/22 9:16 a.m.•37 views

CVE-2026-2938

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS0.0058EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/02/22 8:32 a.m.•59 views

CVE-2026-2938 SourceCodester Student Result Management System update_smtp.php access control

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS0.0058EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/22 8:32 a.m.•15 views

CVE-2026-2938

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS6.8AI score0.0058EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/02/22 8:32 a.m.•53 views

CVE-2026-2938

The CVE-2026-2938 entry relates to SourceCodester Student Result Management System 1.0, affecting the file /srms/script/admin/core/update_smtp.php. The root cause is an unspecified function allowing improper access controls, enabling remote initiation of an attack. Public exploit disclosure is no...

7.5CVSS6.7AI score0.0058EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/22 12:00 a.m.•6 views

CVE-2026-2938: Improper Access Control

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS6.7AI score0.0058EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/22 12:00 a.m.•33 views

PT-2026-21425

Name of the Vulnerable Software and Affected Versions SourceCodester Student Result Management System version 1.0 Description A flaw exists that allows for improper access controls. The issue is located in an unknown function within the /srms/script/admin/core/update smtp.php file. This can be...

7.5CVSS7AI score0.0058EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/02/22 12:00 a.m.•30 views

SourceCodester Student Result Management System 访问控制错误漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a vulnerability related to access control, which stems from improper access control practices...

7.5CVSS7.1AI score0.0058EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•15 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS6.9AI score0.00608EPSS
SaveExploits2References1
NVD
NVD
•added 2026/02/20 5:25 p.m.•22 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS0.00608EPSS
SaveExploits2References5
CVE
CVE
•added 2026/02/20 4:02 p.m.•74 views

CVE-2026-2848

CVE-2026-2848 affects SourceCodester Simple Responsive Tourism Website 1.0 . The vulnerability lies in an unknown functionality of the file /classes/Master.php?f=register during registration, where manipulating the Username argument allows SQL injection. The issue can be exploited remotely, and a...

9.8CVSS6.9AI score0.00608EPSS
SaveExploits2References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/20 4:02 p.m.•8 views

CVE-2026-2848 SourceCodester Simple Responsive Tourism Website Registration Master.php sql injection

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

7.5CVSS6.9AI score0.00608EPSS
SaveExploits2References5
attackerkb
attackerkb
•added 2026/02/20 4:02 p.m.•15 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS7.1AI score0.00608EPSS
SaveExploits2References5Affected Software1
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•29 views

SourceCodester Simple Responsive Tourism Website SQL注入漏洞

SourceCodester Simple Responsive Tourism Website is an open-source tourism website developed by SourceCodester. Version 1.0 of SourceCodester Simple Responsive Tourism Website has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter Username in the...

9.8CVSS7.2AI score0.00608EPSS
SaveExploits2References5
Rows per page
Query Builder