Lucene search
K

233046 matches found

NVD
NVD
added 2026/05/25 2:16 a.m.7 views

CVE-2026-9411

A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGSTInvoice.php of the component Invoice Generation Handler. Performing a manipulation of the argument customername/category results in sql injection. The...

6.5CVSS0.00031EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/25 12:45 a.m.4 views

CVE-2026-9411

A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGSTInvoice.php of the component Invoice Generation Handler. Performing a manipulation of the argument customername/category results in sql injection. The...

6.5CVSS5.6AI score0.00031EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/05/25 12:45 a.m.31 views

CVE-2026-9411 SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection

A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGSTInvoice.php of the component Invoice Generation Handler. Performing a manipulation of the argument customername/category results in sql injection. The...

6.5CVSS0.00031EPSS
Exploits0References5
CVE
CVE
added 2026/05/25 12:45 a.m.11 views

CVE-2026-9411

CVE-2026-9411 affects SourceCodester Indian Invoicing System 1.0. The vulnerability is an SQL injection in /Invoicing/IGST_Invoice.php (Invoice Generation Handler) triggered by manipulating arguments such as customer_name or category. Impact is confidentiality/integrity/availability LOW per CVSS ...

6.5CVSS6.4AI score0.00031EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.4 views

SourceCodester Simple POS and Inventory System SQL注入漏洞

SourceCodester Simple POS and Inventory System is SourceCodester open source a simple POS and inventory system . SourceCodester Simple POS and Inventory System version 1.0 SQL injection vulnerability , the vulnerability stems from the GET Parameter Handler component /admin/deleteproduct.php file...

5.8CVSS5.9AI score0.00036EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.4 views

Code-Projects Employee Management System SQL注入漏洞

Code-Projects Employee Management System is a Code-Projects open source employee management system . Code-Projects Employee Management System version 1.0 suffers from a SQL injection vulnerability that originates from the manipulation of an unknown function in the /changepassemp.php file, which...

6.5CVSS6.6AI score0.00031EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.6 views

SB Admin SQL注入漏洞

SB Admin is a Bootstrap based open source admin backend template by Yash Pokharna individual developer. SB Admin suffers from an SQL injection vulnerability that stems from the operation of the function confirmloggedin on the parameter ID in the file /studentdel.php, which could lead to SQL...

7.5CVSS7.2AI score0.00039EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.9 views

PT-2026-43084

A security vulnerability has been detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This affects the function confirm logged in of the file student trans.php. Such manipulation of the argument FIRST NAME/Last Name/EMAIL leads to sql injection. It is...

7.5CVSS6.9AI score0.00039EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.7 views

PT-2026-43077

A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/GetDBDataEx.jsp. Performing a manipulation of the argument strTBName results in sql injection. Remote exploitation of the attack is possible...

7.5CVSS6.8AI score0.00037EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.8 views

Tiandy Easy7 Integrated Management Platform SQL注入漏洞

Tiandy Easy7 Integrated Management Platform is a video surveillance integrated management platform from China Tiandy Company. A SQL injection vulnerability exists in Tiandy Easy7 Integrated Management Platform version 7.17.0, which originates from the operation of the parameter strTBName in the...

7.5CVSS7.2AI score0.00037EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.9 views

PT-2026-42982

A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST Invoice.php of the component Invoice Generation Handler. Performing a manipulation of the argument customer name/category results in sql injection. The...

6.5CVSS6.4AI score0.00031EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.5 views

SB Admin SQL注入漏洞

SB Admin is a Bootstrap based open source admin backend template by Yash Pokharna individual developer. SB Admin has a SQL injection vulnerability that originates from the parameter FIRSTNAME/LastName/EMAIL operation of the function confirmloggedin in the file studenttrans.php, which could lead t...

7.5CVSS7.2AI score0.00039EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.6 views

PT-2026-43217

Twitter-Clone 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the name parameter. Attackers can submit crafted payloads to the search.php endpoint to extract database information including username...

8.8CVSS6.2AI score0.00086EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

WordPress plugin JetEngine SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS5.9AI score0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.6 views

PT-2026-43089

A vulnerability was found in yashpokharna2555 StudentManagementSystem up to cb2f558ddf8d19396de0f92abf2d224d46a0a203. Affected by this issue is the function confirm logged in of the file /studentdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched...

7.5CVSS6.8AI score0.00039EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.3 views

SourceCodester Indian Invoicing System SQL注入漏洞

SourceCodester Indian Invoicing System is a SourceCodester open source Indian invoicing system. SourceCodester Indian Invoicing System version 1.0 suffers from a SQL injection vulnerability that stems from the Invoice Generation Handler component's manipulation of the parameter...

6.5CVSS6.6AI score0.00031EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.4 views

SourceCodester Simple POS and Inventory System SQL注入漏洞

SourceCodester Simple POS and Inventory System is SourceCodester open source a simple POS and inventory system . SourceCodester Simple POS and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the manipulation of the parameter Name by an unknown function...

7.5CVSS7.1AI score0.00039EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.5 views

Code-Projects Employee Management System SQL注入漏洞

Code-Projects Employee Management System is a Code-Projects open source employee management system . Code-Projects Employee Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter ID in the file...

6.5CVSS6.7AI score0.00031EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.6 views

Collectric CMU SQL注入漏洞

The Collectric CMU is a smart meter device from Collectric in the Netherlands that supports power metering with supporting communication extensions. A SQL injection vulnerability exists in Collectric CMU version 1.0, which stems from the presence of Boolean-based blind SQL injection in the lang...

8.8CVSS5.9AI score0.00147EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.6 views

SourceCodester Simple POS and Inventory System SQL注入漏洞

SourceCodester Simple POS and Inventory System is SourceCodester open source a simple POS and inventory system . SourceCodester Simple POS and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the manipulation of parameter IDs by unknown functions in the...

5.8CVSS5.8AI score0.00036EPSS
Exploits0References6
Rows per page
Query Builder