Lucene search
K

15944 matches found

Cvelist
Cvelist
added 2026/04/05 3:15 p.m.21 views

CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file saveemp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

5.8CVSS0.00015EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/05 3:15 p.m.0 views

CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file saveemp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

5.8CVSS5.5AI score0.00015EPSS
Exploits0References4
CVE
CVE
added 2026/04/05 3:15 p.m.1 views

CVE-2026-5576

SourceCodester/jkev Record Management System 1.0 contains a flaw in Add Employee page, specifically in save_emp.php that allows unrestricted file upload. The issue enables remote exploitation; exploit code is reported as available. The CVSS-derived data indicate network access, low to moderate im...

5.8CVSS5.5AI score0.00015EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/05 3:0 p.m.20 views

CVE-2026-5575 SourceCodester/jkev Record Management System Login index.php sql injection

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS0.0004EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/05 3:0 p.m.0 views

CVE-2026-5575 SourceCodester/jkev Record Management System Login index.php sql injection

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.0004EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 3:0 p.m.0 views

CVE-2026-5575

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.0004EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/04/05 3:0 p.m.0 views

EUVD-2026-19099

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.0004EPSS
Exploits0References4
CVE
CVE
added 2026/04/05 3:0 p.m.5 views

CVE-2026-5575

SourceCodester/jkev Record Management System 1.0 is affected in the Login component, specifically the file index.php. The vulnerability arises from manipulation of the Username argument, leading to SQL injection. The attack could be launched remotely, and public exploits are available. The connec...

7.5CVSS6.8AI score0.0004EPSS
Exploits0References4
NVD
NVD
added 2026/04/05 2:16 a.m.2 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS0.00018EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/05 1:0 a.m.2 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.4AI score0.00018EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 1:0 a.m.2 views

CVE-2026-5531 SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.6AI score0.00018EPSS
Exploits0References5
CVE
CVE
added 2026/04/05 1:0 a.m.5 views

CVE-2026-5531

CVE-2026-5531 affects SourceCodester Student Result Management System 1.0. The vulnerability is in the HTTP GET Request Handler, impacting the file /login_credentials.txt where login credentials may be stored in cleartext on disk. The issue can be triggered remotely, and public disclosures exist....

6.9CVSS5.6AI score0.00018EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/05 1:0 a.m.24 views

CVE-2026-5531 SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS0.00018EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.3 views

PT-2026-30444

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS5.7AI score0.0004EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.0 views

PT-2026-30402

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated...

6.9CVSS5.4AI score0.00018EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.4 views

SourceCodester Student Result Management System 安全漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a security vulnerability, which stems from data being stored in plaintext in the file...

6.9CVSS6AI score0.00018EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/04/03 4:59 p.m.2 views

CVE-2026-5330

A vulnerability was found in SourceCodester/mayurik Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deleteuser of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access...

6.9CVSS6.3AI score0.00054EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/03 10:58 a.m.1 views

CVE-2026-5325

A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...

5.1CVSS4.7AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/02 3:31 p.m.2 views

EUVD-2026-18215

A vulnerability was found in SourceCodester/mayurik Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deleteuser of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access...

6.9CVSS6.3AI score0.00054EPSS
Exploits0References5
NVD
NVD
added 2026/04/02 1:16 p.m.1 views

CVE-2026-5330

A vulnerability was found in SourceCodester/mayurik Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deleteuser of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access...

6.9CVSS0.00054EPSS
Exploits0References4
Rows per page
Query Builder