Lucene search
+L

20174 matches found

Cvelist
Cvelist
•added 2026/10/25 2:45 p.m.•32 views

CVE-2026-116055 SourceCodester Performance Indicator System deleteproduct.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be...

6.5CVSS0.00319EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/25 2:45 p.m.•18 views

CVE-2026-116055

The SourceCodester Performance Indicator System 1.0 is vulnerable to an SQL injection vulnerability within an unknown function of the /opils/admin/deleteproduct.php file. By manipulating the ID argument, a remote attacker can execute arbitrary SQL commands. The documents state that the exploit is...

6.5CVSS6.5AI score0.00319EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/25 12:00 a.m.•17 views

PT-2026-123062

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

7.5CVSS7.1AI score0.00269EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/10/25 12:00 a.m.•12 views

SourceCodester Performance Indicator System input validation error vulnerability

Version 1.0 of the SourceCodester Performance Indicator System contains a security vulnerability stemming from improper handling of the Contact parameter in the file /opils/staff/editdealer.php, which may lead to SQL injection...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/10/25 12:00 a.m.•10 views

SourceCodester Performance Indicator System input validation error vulnerability

Version 1.0 of the SourceCodester Performance Indicator System contains a security vulnerability stemming from improper handling of the Contact parameter in the file /opils/staff/adddealer.php, which may lead to SQL injection...

7.5CVSS7.1AI score0.00269EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/25 12:00 a.m.•17 views

PT-2026-123112

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit dealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

7.5CVSS7.3AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/25 12:00 a.m.•15 views

PT-2026-123113

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save profile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS7.1AI score0.00269EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/10/25 12:00 a.m.•8 views

SourceCodester Performance Indicator System input validation error vulnerability

Version 1.0 of the SourceCodester Performance Indicator System contains a security vulnerability stemming from improper handling of the ID parameter in the file /opils/admin/deleteproduct.php; this may lead to SQL injection...

6.5CVSS6.6AI score0.00319EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/10/25 12:00 a.m.•9 views

SourceCodester Performance Indicator System input validation error vulnerability

Version 1.0 of the SourceCodester Performance Indicator System contains a security vulnerability stemming from improper handling of the Contact parameter in the file /opils/staff/saveprofile.php, which may lead to SQL injection...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/25 12:00 a.m.•15 views

PT-2026-123053

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be...

6.5CVSS6.5AI score0.00319EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/21 7:17 p.m.•14 views

CVE-2026-114267

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS0.00307EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 6:30 p.m.•9 views

CVE-2026-114267 SourceCodester Food Order Management System Admin Endpoint authorization

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS6.8AI score0.00307EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 6:30 p.m.•26 views

CVE-2026-114267

A vulnerability exists in SourceCodester Food Order Management System 1.0 within the Admin Endpoint component. The issue involves an unknown function that leads to missing authorization , allowing an attacker to perform actions without proper permissions. This attack can be executed remotely , an...

7.5CVSS6.8AI score0.00307EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/21 6:30 p.m.•16 views

EUVD-2026-107494

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS6.9AI score0.00307EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 6:30 p.m.•30 views

CVE-2026-114267 SourceCodester Food Order Management System Admin Endpoint authorization

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS0.00307EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•17 views

PT-2026-120781

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS6.9AI score0.00307EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/10/20 4:00 p.m.•9 views

SourceCodester food order management system authorization issue vulnerability

The SourceCodester food order management system version 1.0 contains an authorization issue vulnerability. This vulnerability stems from a lack of authorization in the Admin Endpoint component, potentially allowing remote attackers to gain unauthorized access...

7.5CVSS7.2AI score0.00307EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/19 9:17 a.m.•14 views

CVE-2026-112097

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactionshandler.php?action=savesale of the component Sales Management Handler. The manipulation of the argument HsnCode results in cross site scripting. It is possible...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/19 9:17 a.m.•13 views

CVE-2026-112095

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/productshandler.php?action=save of the component Product Management. Executing a manipulation of the argument ProductId/ProductName can lead to cross site scripting. The attack may be...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/19 9:17 a.m.•12 views

CVE-2026-112096

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

5.1CVSS0.00199EPSS
SaveExploits0References6
Rows per page
Query Builder