Lucene search
+L

218804 matches found

Cvelist
Cvelist
added 2026/07/05 11:30 a.m.42 views

CVE-2026-14745 code-projects Real State Services single-list_rent.php sql injection

A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-listrent.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to t...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/05 11:15 a.m.48 views

CVE-2026-14744 code-projects Real State Services normalHomeRent.php sql injection

A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS0.00263EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 11:15 a.m.13 views

CVE-2026-14744

A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/05 11:15 a.m.28 views

CVE-2026-14744

CVE-2026-14744 affects code-projects Real State Services 1.0. The vulnerability exists in an unknown function of /normalHomeRent.php where manipulating the loc argument allows SQL injection. Exploitation is possible remotely, and public exploits have been released. No remediation details are prov...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/05 11:0 a.m.45 views

CVE-2026-14743 code-projects Real State Services normalHomeSale.php sql injection

A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might ...

7.5CVSS0.00263EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 11:0 a.m.12 views

CVE-2026-14743

A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might ...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/07/05 10:16 a.m.17 views

CVE-2026-14735

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

7.5CVSS0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/05 10:0 a.m.14 views

EUVD-2026-41745

A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly...

7.5CVSS6.9AI score0.00259EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/05 10:0 a.m.58 views

CVE-2026-14737 Hanwang e-Face General Management Platform querySysAuthStr.do sql injection

A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly...

7.5CVSS0.00259EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/05 10:0 a.m.11 views

CVE-2026-14737

A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly...

7.5CVSS6.9AI score0.00259EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/07/05 10:0 a.m.33 views

CVE-2026-14737

Hanwang e-Face General Management Platform 6.3.5.4 is affected. The vulnerability resides in the function handling /sysAuthStr/querySysAuthStr.do, where manipulation of the argument order leads to SQL injection. The issue can be triggered remotely, and public exploitation code is available. Explo...

7.5CVSS6.9AI score0.00259EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/05 9:30 a.m.10 views

CVE-2026-14735

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/05 9:30 a.m.23 views

CVE-2026-14735

CVE-2026-14735 affects code-projects Smart Parking System 1.0, specifically the unknown function in /parkings/parkings.php. The vulnerability arises from manipulating the street, city, or status arguments, leading to an SQL injection. A remote attack is possible and the exploit has been disclosed...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 9:16 a.m.13 views

CVE-2026-14731

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipulation of the argument editid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

6.5CVSS0.00204EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 9:16 a.m.12 views

CVE-2026-14732

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editexam.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

7.5CVSS0.00284EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/05 9:16 a.m.12 views

CVE-2026-14733

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editcoursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

7.5CVSS0.00284EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 9:15 a.m.11 views

CVE-2026-14734

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /editproduct.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used...

7.5CVSS6.8AI score0.00284EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/05 9:0 a.m.10 views

CVE-2026-14733

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editcoursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/05 9:0 a.m.40 views

CVE-2026-14733 SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /editcoursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

7.5CVSS0.00284EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/05 9:0 a.m.40 views

CVE-2026-14733

CVE-2026-14733 affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability involves manipulation of the ID parameter in /edit_coursea.php leading to SQL injection. It is exploitable remotely and the exploit is public. CVSS metrics indicate high impact with network access, low ...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References6
Rows per page
Query Builder