Lucene search
+L

19503 matches found

Vulnrichment
Vulnrichment
•added 2026/04/13 12:00 a.m.•7 views

CVE-2026-36941

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manageroom.php...

5.9AI score0.00311EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/13 12:00 a.m.•21 views

SourceCodester Pharmacy Sales and Inventory System SQL注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/10 3:31 p.m.•23 views

EUVD-2026-21392

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

5.9AI score0.005EPSS
SaveExploits1References2
NVD
NVD
•added 2026/04/10 3:16 p.m.•19 views

CVE-2026-36236

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

9.8CVSS0.005EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/04/10 12:00 a.m.•14 views

CVE-2026-36236

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

5.9AI score0.005EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•31 views

SourceCodester Engineers Online Portal 安全漏洞

SourceCodester Engineers Online Portal is an online portal for engineers, developed by SourceCodester as open source. Version 1.0 of the SourceCodester Engineers Online Portal contains a security vulnerability. This vulnerability stems from the newpassword parameter in the updatepassword.php file...

9.8CVSS5.8AI score0.005EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•2 views

CVE-2026-36236: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

9.8CVSS5.8AI score0.005EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/10 12:00 a.m.•61 views

CVE-2026-36236

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

0.005EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/10 12:00 a.m.•21 views

PT-2026-31931

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update password.php via the new password parameter...

5.9AI score0.005EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/04/09 12:32 a.m.•20 views

EUVD-2026-20788

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/09 12:32 a.m.•15 views

EUVD-2026-20803

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/09 12:31 a.m.•14 views

EUVD-2026-20787

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS4.7AI score0.00331EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/08 11:17 p.m.•14 views

CVE-2026-5812

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS0.00415EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/08 11:17 p.m.•14 views

CVE-2026-5811

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS0.00415EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/08 10:30 p.m.•47 views

CVE-2026-5812

CVE-2026-5812 – SourceCodester Pharmacy Product Management System 1.0 : A flaw in add-sales.php (POST Parameter Handler) allows manipulation of the txtqty parameter, triggering business-logic errors. Exploitation can be remote; exploit publicly released. No explicit patch/version details or vendo...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/08 10:30 p.m.•58 views

CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS0.00415EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/08 10:30 p.m.•8 views

CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.8AI score0.00415EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/08 10:16 p.m.•21 views

CVE-2026-5810

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS0.00331EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/08 10:15 p.m.•7 views

CVE-2026-5811

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.8AI score0.00415EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/08 10:15 p.m.•39 views

CVE-2026-5811 SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS0.00415EPSS
SaveExploits0References5
Rows per page
Query Builder