Lucene search
+L

264173 matches found

osv_cve
osv_cve
•added 2026/10/21 10:45 p.m.•12 views

CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

6.9CVSS5.7AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/10/21 10:45 p.m.•8 views

CVE-2026-114441 oretnom23 php-travel-agency-system update.php sql injection

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/fullname/visano/hiden/title/description/pageid/user causes sql injection. The attack may be initiated remotely. T...

7.5CVSS7AI score0.00419EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 10:30 p.m.•18 views

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00343EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 10:30 p.m.•13 views

CVE-2026-114440

A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the admin/delete.php file. Attackers can initiate a remote attack by manipulating the costomer_id , ticket_id , payment_id , id , document_id , salary_id , emp_id , or user_id arguments. While the exploit is pub...

7.5CVSS7AI score0.00343EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/21 10:30 p.m.•10 views

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

6.9CVSS5.8AI score
SaveExploits0References8
NVD
NVD
•added 2026/10/21 10:16 p.m.•10 views

CVE-2026-114384

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

6.5CVSS0.00319EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/21 10:16 p.m.•10 views

CVE-2026-114381

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

6.5CVSS0.00319EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 10:00 p.m.•17 views

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

6.5CVSS0.00319EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 10:00 p.m.•12 views

CVE-2026-114384

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a remote SQL injection vulnerability within an unknown function of the /transactionsave.php file. An attacker can exploit this by manipulating the del argument. The exploit has been disclosed publicly and may be used. No specific r...

6.5CVSS6.5AI score0.00319EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 10:00 p.m.•7 views

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

6.5CVSS6.5AI score0.00319EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/21 9:17 p.m.•16 views

CVE-2026-114380

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

6.5CVSS0.00209EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/21 9:17 p.m.•16 views

CVE-2026-114378

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

6.5CVSS0.00262EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 9:15 p.m.•6 views

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

6.5CVSS6.4AI score0.00319EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 9:15 p.m.•22 views

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

6.5CVSS0.00319EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 9:15 p.m.•15 views

CVE-2026-114381

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function of the /orderdetail.php file. An attacker can perform a remote attack by manipulating the ID argument. The exploit has been publicly disclosed and may be utilized. No specifi...

6.5CVSS6.4AI score0.00319EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 9:00 p.m.•32 views

CVE-2026-114380 itsourcecode Online Cake Ordering System inserttrans.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

6.5CVSS0.00209EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 9:00 p.m.•19 views

CVE-2026-114380

A SQL injection vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw is located within an unknown function in the /inserttrans.php file, triggered by manipulating the prcd argument. This vulnerability can be exploited remotely , and the documentation confirms that a...

6.5CVSS6.4AI score0.00209EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/21 9:00 p.m.•8 views

EUVD-2026-107568

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

6.5CVSS6.5AI score0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 8:30 p.m.•25 views

CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

6.5CVSS0.00262EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 8:30 p.m.•18 views

CVE-2026-114378

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection in the /deleteproduct.php file. An attacker can manipulate the ID argument to execute unauthorized SQL commands. This vulnerability can be triggered remotely, and public exploits are currently available for use. No...

6.5CVSS6.5AI score0.00262EPSS
SaveExploits0References6
Rows per page
Query Builder