Lucene search
+L

19428 matches found

Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•23 views

PT-2026-43113

A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit ...

5.1CVSS4.4AI score0.00331EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•4 views

CVE-2026-9444: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack may be launched remotely...

5.8CVSS5.6AI score0.00332EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•29 views

SourceCodester Simple POS and Inventory System 代码问题漏洞

SourceCodester Simple POS and Inventory System is SourceCodester open source a simple POS and inventory system . SourceCodester Simple POS and Inventory System 1.0 version of the code problem vulnerability , the vulnerability stems from the File Extension Handler component /admin/addproduct.php...

6.5CVSS6.7AI score0.00347EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•34 views

PT-2026-42984

A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly availabl...

5.3CVSS4.2AI score0.00449EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•2 views

CVE-2026-9486: Cross-Site Request Forgery (CSRF)

A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks...

5.3CVSS5.4AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•34 views

PT-2026-43030

A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handler. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible...

6.5CVSS6.2AI score0.00347EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•21 views

SourceCodester Student Grades Management System 代码注入漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system . SourceCodester Student Grades Management System version 1.0 has a code injection vulnerability , the vulnerability stems from the operation of the parameter Remarks in the file...

5.1CVSS5.7AI score0.00331EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•1 views

CVE-2026-9414: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/addorder.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customername results in cross sit...

5.1CVSS3.8AI score0.00331EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•38 views

PT-2026-43103

A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argument student id results in improper authorization. The attack may be initiated remotely. The exploit has been made public...

6.5CVSS6.3AI score0.00347EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•31 views

PT-2026-43029

Name of the Vulnerable Software and Affected Versions SourceCodester Simple POS and Inventory System version 1.0 Description An issue exists in the GET Parameter Handler component where the delete function within the '/admin/deleteproduct.php' endpoint is susceptible to SQL injection. This occurs...

5.8CVSS5.8AI score0.00332EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•1 views

CVE-2026-9484: Improper Authorization

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroom of the file classroom.php. Executing a manipulation of the argument classroomid can lead to improper authorization...

6.5CVSS5.5AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•1 views

CVE-2026-9447: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. The impacted element is an unknown function of the file /user/search.php. Performing a manipulation of the argument Name results in sql injection. The attack is possible to be carried out remotely. The exploit has be...

7.5CVSS5.5AI score0.00411EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•23 views

SourceCodester Indian Invoicing System SQL注入漏洞

SourceCodester Indian Invoicing System is a SourceCodester open source Indian invoicing system. SourceCodester Indian Invoicing System version 1.0 suffers from a SQL injection vulnerability that stems from the Invoice Generation Handler component's manipulation of the parameter...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•25 views

SourceCodester Simple POS and Inventory System SQL注入漏洞

SourceCodester Simple POS and Inventory System is SourceCodester open source a simple POS and inventory system . SourceCodester Simple POS and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the manipulation of parameter IDs by unknown functions in the...

5.8CVSS5.8AI score0.00332EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•25 views

PT-2026-43114

A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks...

5.3CVSS5.4AI score0.00225EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•3 views

CVE-2026-9446: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Simple POS and Inventory System 1.0. The affected element is an unknown function of the file /admin/editcustomer.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed t...

5.8CVSS5.5AI score0.00332EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•2 views

CVE-2026-9411: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGSTInvoice.php of the component Invoice Generation Handler. Performing a manipulation of the argument customername/category results in sql injection. The...

6.5CVSS5.5AI score0.00316EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•2 views

CVE-2026-9483: Improper Authorization

A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argument studentid results in improper authorization. The attack may be initiated remotely. The exploit has been made public a...

6.5CVSS5.4AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•21 views

SourceCodester Student Grades Management System 安全漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A security vulnerability exists in SourceCodester Student Grades Management System version 1.0, which originates from an unknown section and could lead to cross-site request forgery. ...

5.3CVSS5.7AI score0.00225EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•28 views

SourceCodester Student Grades Management System 授权问题漏洞

SourceCodester Student Grades Management System is SourceCodester open source a student grades management system . SourceCodester Student Grades Management System version 1.0 has an authorization issue vulnerability , the vulnerability stems from the operation of the parameter studentid in the fi...

6.5CVSS6.6AI score0.00347EPSS
SaveExploits0References5
Rows per page
Query Builder