Lucene search
+L

20174 matches found

CVE
CVE
•added 2026/10/12 6:15 p.m.•27 views

CVE-2026-108919

A cross-site scripting (XSS) vulnerability exists in the Student Registration component of SourceCodester Drug Recommendation System 1.0 . The flaw is located in an unknown function within the Auth/add_student.php file, where improper neutralization of inputs—specifically the txtname , txtpasswor...

5.3CVSS3.6AI score0.00402EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•16 views

PT-2026-110876

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious school causes...

5.3CVSS3.6AI score0.00402EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•12 views

PT-2026-110877

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user record.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be...

5.3CVSS3.5AI score0.00263EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•16 views

CVE-2026-108919: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cros...

5.3CVSS3.6AI score0.00402EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•16 views

CVE-2026-108920: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/userrecord.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launch...

5.3CVSS3.5AI score0.00263EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/06 5:17 p.m.•23 views

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

6.5CVSS0.002EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/06 4:00 p.m.•29 views

CVE-2026-105957

A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/06 4:00 p.m.•11 views

CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 4:00 p.m.•19 views

EUVD-2026-93487

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 4:00 p.m.•51 views

CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/06 9:17 a.m.•16 views

CVE-2026-105808

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

5.1CVSS0.00263EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/06 9:17 a.m.•17 views

CVE-2026-105809

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS0.00348EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/06 8:16 a.m.•18 views

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 8:15 a.m.•41 views

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS0.00348EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/06 8:15 a.m.•26 views

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/06 8:15 a.m.•15 views

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 8:15 a.m.•17 views

EUVD-2026-93226

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

5.3CVSS3.7AI score0.00348EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 8:00 a.m.•44 views

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

5.1CVSS0.00263EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/06 8:00 a.m.•12 views

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

5.1CVSS3.7AI score0.00263EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/06 8:00 a.m.•26 views

CVE-2026-105808

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within the clean function of the searchresults.php file. An attacker can perform a remote manipulation of the searchbox argument to execute the XSS attack. The exploit h...

5.1CVSS3.7AI score0.00263EPSS
SaveExploits0References7
Rows per page
Query Builder