CVE-2026-114250

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

CVE-2026-114254

A SQL injection vulnerability exists in the Login function of the admin_class.php file within oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). An attacker can manipulate the username or password arguments to execute arbitrary SQL commands. Remote explo...

EUVD-2026-107323

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

loxs-optimized

loxs-optimized Project from https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Note: It mainly bypasses the CSP payload 2024-11-06 Add CSP-Bypass-xss.txt to xss.txt 2024-11-07 Removing interfering information Only the vulnerable information is displayed 2024-11-11 Solves the problem that the...

Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

EUVD-2026-107287

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...

CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...

CVE-2026-114252

A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) within an unknown function of the /pages/cust_searchfrm.php file. An attacker can initiate a remote attack by manipulating the ID argument to execute unautho...

exploits

exploits Published PoCs can be found at exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-and-CVE-2023-24204 Introduction In the ever-evolving landscape of cybersecurity, web applications remain a prime target for attackers seeking to exploit vulnerabilities. Recently, two critical vulnerabilities were discovered in the SourceCodester Simple Customer Relationship...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

EUVD-2026-107285

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114251

A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac). The flaw is located in an unknown function within the /pages/cust_del.php file, where manipulation of the ID argument allows for remote execution of unautho...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

EUVD-2026-107284

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

CVE-2026-114250

A flaw in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) allows for a SQL injection via the ID argument during processing of the /pages/cust_edit.php file. This vulnerability can be exploited remotely to interact with the database. While the ex...