CVE-2026-114381

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function of the /orderdetail.php file. An attacker can perform a remote attack by manipulating the ID argument. The exploit has been publicly disclosed and may be utilized. No specifi...

CVE-2026-114380

A SQL injection vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw is located within an unknown function in the /inserttrans.php file, triggered by manipulating the prcd argument. This vulnerability can be exploited remotely , and the documentation confirms that a...

EUVD-2026-107568

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-114380 itsourcecode Online Cake Ordering System inserttrans.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-114378

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection in the /deleteproduct.php file. An attacker can manipulate the ID argument to execute unauthorized SQL commands. This vulnerability can be triggered remotely, and public exploits are currently available for use. No...

CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

EUVD-2026-107554

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-114266

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqliquery of the file profile.php. The manipulation of the argument adminid leads to sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2026-114263

A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...

EUVD-2026-107478

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqliquery of the file profile.php. The manipulation of the argument adminid leads to sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2026-114266 ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqliquery of the file profile.php. The manipulation of the argument adminid leads to sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2026-114266

A security vulnerability exists in ProjectWorlds Advanced Library Management System 1.0 . The flaw resides in the mysqli_query function within the profile.php file, where improper handling of the admin_id argument allows for a SQL injection . This vulnerability can be exploited remotely , and pub...

CVE-2026-114265

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to SQL injection via the Search Form component. The flaw exists in the mysqli_query function within the returned_book_search.php file, where improper handling of the datefrom and dateto arguments allows for remote execution. P...

EUVD-2026-107425

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqliquery of the file returnedbooksearch.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection. The attack can be...

EUVD-2026-107415

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

CVE-2026-114264

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to a SQL injection flaw within an unknown function in the edit_member.php file. Attackers can manipulate the firstname , middlename , lastname , address , branch , or type arguments to execute the injection. Remote exploitatio...

CVE-2026-114263 ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection

A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...

EUVD-2026-107410

A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...

CVE-2026-114263

A SQL injection vulnerability exists in the ProjectWorlds Advanced Library Management System 1.0 within the individual_report_search.php file. The flaw is located in the mysqli_query function, where improper handling of the roll_number argument allows for remote exploitation. An exploit is public...

CVE-2026-76477

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...