Lucene search
+L

218866 matches found

Positive Technologies
Positive Technologies
added 2026/07/05 12:0 a.m.28 views

PT-2026-55766

Name of the Vulnerable Software and Affected Versions code-projects Online Examination version 1.0 Description An issue exists in the head.php file where manipulating the uname and password arguments can lead to SQL injection, a technique used to interfere with the queries that an application mak...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/07/05 12:0 a.m.30 views

PT-2026-55791

Name of the Vulnerable Software and Affected Versions code-projects Real State Services version 1.0 Description A remote SQL injection exists in the /addprojectrent.php file. The issue occurs when the amen variable is manipulated, allowing an attacker to execute arbitrary SQL commands on the...

7.5CVSS7.4AI score0.00269EPSS
SaveExploits0References9
NVD
NVD
added 2026/07/04 11:16 p.m.14 views

CVE-2026-14658

A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange results in sql injection. It is possible to launch the attack remotely. The exploit is now public...

6.5CVSS0.002EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 10:30 p.m.11 views

CVE-2026-14660

A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The exploit has been made public and could...

7.5CVSS5.8AI score0.00263EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/04 10:30 p.m.35 views

CVE-2026-14660

The CVE-2026-14660 entry concerns code-projects Online Job Portal 1.0. The vulnerability lies in login.php where manipulating the arguments txtUser/txtPass causes SQL injection. Attack could be performed remotely and an exploit has been publicly released. Affected component: login handling in Onl...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 10:30 p.m.62 views

CVE-2026-14660 code-projects Online Job Portal login.php sql injection

A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The exploit has been made public and could...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 10:16 p.m.13 views

CVE-2026-14657

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions causes sql injection. The attack can be initiated remotely. T...

6.5CVSS0.00204EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 10:15 p.m.46 views

CVE-2026-14659 itsourcecode Hospital Management System patientappointment.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argument patiente leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public...

6.5CVSS0.002EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 10:15 p.m.12 views

CVE-2026-14659

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argument patiente leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/04 10:0 p.m.61 views

CVE-2026-14658 code-projects Assessment Management marking-scheme.php sql injection

A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange results in sql injection. It is possible to launch the attack remotely. The exploit is now public...

6.5CVSS0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 9:45 p.m.54 views

CVE-2026-14657 code-projects Assessment Management Database Query marking-scheme.php sql injection

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions causes sql injection. The attack can be initiated remotely. T...

6.5CVSS0.00204EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 9:17 p.m.15 views

CVE-2026-14653

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00269EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 9:17 p.m.14 views

CVE-2026-14654

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 9:0 p.m.33 views

CVE-2026-14654

CVE-2026-14654 concerns an SQL injection in SourceCodester Simple and Nice Shopping Cart Script 1.0. The flaw affects an unknown function in the file /admin/girlsproductdeletequery.php where manipulating the user_id argument enables injection. The vulnerability can be exploited remotely and the e...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 9:0 p.m.14 views

EUVD-2026-41698

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 8:45 p.m.42 views

CVE-2026-14653 SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 8:45 p.m.14 views

EUVD-2026-41697

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 8:30 p.m.17 views

CVE-2026-14652

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit ha...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/04 8:30 p.m.49 views

CVE-2026-14652 SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit ha...

7.5CVSS0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 8:30 p.m.18 views

EUVD-2026-41696

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit ha...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
Rows per page
Query Builder