Lucene search
+L

16342 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/05 9:0 a.m.8 views

CVE-2026-14733

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editcoursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/05 9:0 a.m.35 views

CVE-2026-14733 SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editcoursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

7.5CVSS0.00284EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/05 9:0 a.m.10 views

EUVD-2026-41741

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editcoursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/05 8:45 a.m.32 views

CVE-2026-14732

The CVE concerns SourceCodester Class and Exam Timetabling System 1.0, where manipulating the ID parameter in /edit_exam.php enables SQL injection. The issue is exploitable remotely, with publicly disclosed exploit. CVSS metrics indicate network access, low attack complexity, no privileges requir...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 8:45 a.m.11 views

CVE-2026-14732

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editexam.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/05 8:45 a.m.12 views

EUVD-2026-41740

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editexam.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 8:16 a.m.15 views

CVE-2026-14725

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

6.5CVSS0.00214EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 8:16 a.m.11 views

CVE-2026-14719

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The...

7.5CVSS0.00294EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 8:0 a.m.11 views

CVE-2026-14725

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

6.5CVSS6.3AI score0.00214EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/05 8:0 a.m.13 views

EUVD-2026-41737

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

6.5CVSS6.3AI score0.00214EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/05 8:0 a.m.39 views

CVE-2026-14725 SourceCodester Online Boat Reservation System session expiration

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

6.5CVSS0.00214EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/05 7:0 a.m.26 views

CVE-2026-14719

CVE-2026-14719 describes a privilege-management flaw in SourceCodester Onlne Examination & Learning Management System 1.0. The vulnerable component is the register.php file of the Registration Endpoint. An attacker can manipulate the role parameter to achieve improper privilege management, and th...

7.5CVSS6.7AI score0.00294EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 7:0 a.m.11 views

CVE-2026-14719

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The...

7.5CVSS6.7AI score0.00294EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/05 7:0 a.m.40 views

CVE-2026-14719 SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The...

7.5CVSS0.00294EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/05 5:15 a.m.18 views

EUVD-2026-41728

A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 5:15 a.m.8 views

CVE-2026-14713

A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/05 5:15 a.m.42 views

CVE-2026-14713 SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injection

A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/05 5:15 a.m.24 views

CVE-2026-14713

SourceCodester Pizzafy E-Commerce System 1.0 is affected by a remote SQL injection in /admin/ajax.php?action=confirm_order caused by manipulating the ID parameter. The vulnerability allows remote exploitation and has publicly released PoC code. Documented metrics indicate high severity (CVSS up t...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 3:16 a.m.17 views

CVE-2026-14693

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancelorder of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit h...

5.5CVSS0.00234EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 3:16 a.m.14 views

CVE-2026-14694

A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancelorder of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible...

6.5CVSS0.002EPSS
SaveExploits0References6
Rows per page
Query Builder