CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90615

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-90615 SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

EUVD-2026-77170

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-90615 SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-90615

CVE-2026-90615 affects SourceCodester Class and Exam Timetabling System 1.0 . The vulnerability is a cross-site scripting (XSS) flaw in the file /subject1.php, triggered by manipulation of the subject argument. The attack is executable remotely and requires user interaction but no authentication....

PT-2026-91118

Name of the Vulnerable Software and Affected Versions SourceCodester Inventory Management System version 1.0 Description An authorization bypass exists in the invoice.php file. A remote attacker can exploit this by manipulating the ID argument, allowing them to bypass security checks and gain...

CVE-2026-90695: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

PT-2026-91025

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A remote cross-site scripting issue exists in the /subject1.php file. This occurs when the subject argument is manipulated, allowing an attacker to execute scripts in the...

PT-2026-91113

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors handler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

PT-2026-91117

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products handler.php of the component Product Management Module. Executing a manipulation of the argument Product Name can lead to cross site...

CVE-2026-90696: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90697: Authorization Bypass Through User-Controlled Key

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be...

CVE-2026-90694: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90615: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-90526

CVE-2026-90526 is a SQL injection in SourceCodester School Registration and Fee System 1.0 , specifically in an unknown function of /bilal/save_class.php via the Category argument. The vulnerability is remotely exploitable over the network with no authentication required and low attack complexity...

EUVD-2026-77028

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90526 SourceCodester School Registration and Fee System save_class.php sql injection

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90526 SourceCodester School Registration and Fee System save_class.php sql injection

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...