Lucene search
K

216432 matches found

Vulnrichment
Vulnrichment
added 2026/04/05 6:15 p.m.0 views

CVE-2026-5587 wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection

A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the function executesql of the file core/agents.py of the component Refiner Agent. The manipulation leads to sql injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00196EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/05 6:15 p.m.26 views

CVE-2026-5587 wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection

A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the function executesql of the file core/agents.py of the component Refiner Agent. The manipulation leads to sql injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS0.00196EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 6:15 p.m.3 views

CVE-2026-5587

A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the function executesql of the file core/agents.py of the component Refiner Agent. The manipulation leads to sql injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.3AI score0.00196EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/05 6:0 p.m.24 views

CVE-2026-5586 zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00256EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/05 6:0 p.m.0 views

CVE-2026-5586 zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS6.4AI score0.00256EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/05 6:0 p.m.2 views

CVE-2026-5586

A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS6.4AI score0.00256EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2026/04/05 6:0 p.m.7 views

CVE-2026-5586

CVE-2026-5586 affects zhongyu09 openchatbi up to version 0.2.1, specifically a vulnerability in an unknown function within the Multi-stage Text2SQL Workflow. Manipulating the argument keywords may lead to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclo...

6.5CVSS6.4AI score0.00256EPSS
Exploits0References6
NVD
NVD
added 2026/04/05 5:16 p.m.3 views

CVE-2026-5580

A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.00257EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 5:16 p.m.8 views

CVE-2026-5583

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS0.00246EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/05 4:30 p.m.29 views

CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS0.00246EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/05 4:30 p.m.8 views

CVE-2026-5583

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS6.5AI score0.00246EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 4:30 p.m.8 views

CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS6.5AI score0.00246EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 4:16 p.m.5 views

CVE-2026-5579

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS0.00257EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 4:16 p.m.4 views

CVE-2026-5577

A vulnerability has been found in Song-Li crossbrowser up to ca690f0fe6954fd9bcda36d071b68ed8682a786a. This affects an unknown part of the file flask/uniquemachineapp.py of the component details Endpoint. Such manipulation of the argument ID leads to sql injection. The attack can be executed...

8.6CVSS0.00376EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/04/05 4:15 p.m.21 views

CVE-2026-5580 CodeAstro Online Classroom Parameter addvideos.php sql injection

A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.00257EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/05 4:15 p.m.0 views

CVE-2026-5580

A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.5AI score0.00257EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/04/05 4:15 p.m.5 views

CVE-2026-5580

CVE-2026-5580 affects CodeAstro Online Classroom 1.0. The flaw is in the file /OnlineClassroom/addvideos.php (Parameter Handler) where manipulating the argument videotitle exposes an SQL injection vulnerability. Exploitation can be performed remotely; public exploits are available. Documents indi...

6.5CVSS6.5AI score0.00257EPSS
Exploits0References5
CVE
CVE
added 2026/04/05 3:45 p.m.7 views

CVE-2026-5578

CodeAstro Online Classroom 1.0 is affected by a SQL injection in the Parameter Handler’s addassessment.php when manipulating the deleteid argument. The vulnerability affects unknown code paths in /OnlineClassroom/addassessment.php and can be triggered remotely; the exploit is public. Exploit matu...

6.5CVSS6.4AI score0.00266EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/05 3:31 p.m.2 views

EUVD-2026-19077

A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack may be launche...

7.5CVSS6.9AI score0.00259EPSS
Exploits0References6
CVE
CVE
added 2026/04/05 3:30 p.m.7 views

CVE-2026-5577

CVE-2026-5577 affects Song-Li cross_browser (up to commit ca690f0fe6954fd9bcda36d071b68ed8682a786a). The vulnerable component is the details Endpoint in the file flask/uniquemachine_app.py. Manipulating the argument ID can lead to an SQL injection vulnerability. The issue can be triggered remotel...

8.6CVSS6.7AI score0.00376EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder