Lucene search
+L

17693 matches found

Cvelist
Cvelist
•added 2026/08/17 9:15 p.m.•37 views

CVE-2026-75077 SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulation of the argument course leads to cross site scripting. The attack may be launched remotely. The exploit is publicly...

5.3CVSS0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/17 7:45 p.m.•12 views

CVE-2026-75014 SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS5.4AI score0.00431EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/08/17 7:45 p.m.•38 views

CVE-2026-75014

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/08/17 7:45 p.m.•44 views

CVE-2026-75014 SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/17 5:15 a.m.•40 views

CVE-2026-19987 SourceCodester Best Employee Management System Profile exposure of information through directory listing

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...

6.9CVSS0.0051EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/17 5:15 a.m.•31 views

CVE-2026-19987

SourceCodester Best Employee Management System 1.0 contains a vulnerability in the /assets/uploadImage/Profile/ function that allows information exposure via directory listing. Exploitation is described as remotely possible. The available documents identify the affected software and the exposed r...

6.9CVSS5.4AI score0.0051EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•15 views

PT-2026-76881

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A security flaw allows remote exploitation via cross site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in the...

5.3CVSS4.2AI score0.0047EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•16 views

PT-2026-73205

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...

6.9CVSS5.5AI score0.0051EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•0 views

CVE-2026-75014: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS5.6AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•0 views

CVE-2026-19987: Exposure of Information Through Directory Listing

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...

6.9CVSS5.4AI score0.0051EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•19 views

PT-2026-76766

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get barcode data.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and m...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•0 views

CVE-2026-75078: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•0 views

CVE-2026-75077: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulation of the argument course leads to cross site scripting. The attack may be launched remotely. The exploit is publicly...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/16 1:30 a.m.•49 views

CVE-2026-19925 SourceCodester Stock Management System Master.php delete_supplier sql injection

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS0.00349EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/16 1:30 a.m.•13 views

EUVD-2026-59838

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/08/16 1:30 a.m.•30 views

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/16 12:00 a.m.•0 views

CVE-2026-19925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.6AI score0.00349EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/15 6:16 p.m.•13 views

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

6.9CVSS0.00532EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/15 6:00 p.m.•46 views

CVE-2026-19904 SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

4.8CVSS0.00368EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/15 6:00 p.m.•14 views

EUVD-2026-59783

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

4.8CVSS3.3AI score0.00368EPSS
SaveExploits0References6
Rows per page
Query Builder