Lucene search
+L

222662 matches found

Vulnrichment
Vulnrichment
added 2026/05/01 4:00 a.m.7 views

CVE-2026-7553 code-projects Gym Management System edit_exercises.php sql injection

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editexercises.php. The manipulation of the argument editexercise results in sql injection. It is possible to launch the attack remotely. The exploit...

5.8CVSS5.7AI score0.00206EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/01 4:00 a.m.26 views

CVE-2026-7553

CVE-2026-7553 affects code-projects Gym Management System 1.0. The vulnerability resides in the file /admin/edit_exercises.php where manipulation of the argument edit_exercise enables a SQL injection. The issue is exploitable remotely and an exploit has been made public (Exploit maturity: PROOF-O...

5.8CVSS5.2AI score0.00206EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/01 3:45 a.m.22 views

CVE-2026-7550

CVE-2026-7550 affects SourceCodester Pharmacy Sales and Inventory System 1.0. The vulnerability is in an unknown function of the file /ajax.php?action=save_customer where manipulation of the argument ID leads to an SQL injection. It is exploitable remotely and the exploit has been disclosed publi...

7.5CVSS7.3AI score0.00259EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/01 3:45 a.m.13 views

EUVD-2026-26476

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=savecustomer. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS5.5AI score0.00259EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/01 3:45 a.m.7 views

CVE-2026-7550 SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=savecustomer. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS6.8AI score0.00259EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/01 3:30 a.m.8 views

CVE-2026-7549 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletecustomer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS6.8AI score0.00274EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/01 3:30 a.m.8 views

CVE-2026-7549

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletecustomer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS5.3AI score0.00274EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/05/01 3:30 a.m.44 views

CVE-2026-7549 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletecustomer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS0.00274EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/01 3:30 a.m.9 views

EUVD-2026-26475

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletecustomer. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS5.3AI score0.00274EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/01 1:45 a.m.7 views

CVE-2026-7545 SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection

A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the component checkEmail Endpoint. This manipulation causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS6.8AI score0.00259EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/01 1:45 a.m.42 views

CVE-2026-7545

SourceCodester Advanced School Management System 1.0 is affected by an SQL injection in the checkEmail endpoint, specifically via the commonController.php function. The vulnerability stems from manipulation of an element within that file, enabling remote exploitation. The exploit has been publicl...

7.5CVSS7.3AI score0.00259EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/01 1:45 a.m.17 views

CVE-2026-7545

A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the component checkEmail Endpoint. This manipulation causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS5.3AI score0.00259EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/05/01 1:45 a.m.12 views

EUVD-2026-26471

A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the component checkEmail Endpoint. This manipulation causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS7.3AI score0.00259EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/01 1:45 a.m.54 views

CVE-2026-7545 SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection

A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the component checkEmail Endpoint. This manipulation causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS0.00259EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/01 12:00 a.m.6 views

CVE-2026-42475

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted on array to the joinOn function in BuildHelper.php...

5.8AI score0.00201EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.28 views

PT-2026-36298

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit exercises.php. The manipulation of the argument edit exercise results in sql injection. It is possible to launch the attack remotely. The exploi...

5.8CVSS5.7AI score0.00206EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/01 12:00 a.m.6 views

CVE-2026-42475

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted on array to the joinOn function in BuildHelper.php...

6.5CVSS5.8AI score0.00201EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/01 12:00 a.m.37 views

CVE-2026-42474

SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted data array to the data function in BuildHelper.php...

0.00201EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.16 views

PT-2026-36297

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0 Description An issue exists in the '/ajax.php?action=save customer' endpoint where manipulation of the ID argument allows for SQL injection, a technique used to interfere with the...

7.5CVSS7AI score0.00259EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.19 views

SourceCodester Advanced School Management System 注入漏洞

SourceCodester Advanced School Management System is an advanced school management system developed by SourceCodester as open source. Version 1.0 of the SourceCodester Advanced School Management System has a vulnerability related to SQL injection, which originates from an unknown function in the...

7.5CVSS7.1AI score0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder