282340 matches found
CVE-2026-105230 kishor-23 food-waste-management-system deliverymyord.php sql injection
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...
CVE-2026-105230 kishor-23 food-waste-management-system deliverymyord.php sql injection
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...
CVE-2026-105230 kishor-23 food-waste-management-system deliverymyord.php sql injection
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...
CVE-2026-105230
The kishor-23 food-waste-management-system is vulnerable to a SQL injection vulnerability within an unknown function of the delivery/deliverymyord.php file. Attackers can remotely initiate this attack by manipulating the delivery_person_id/order_id arguments. While the exploit has been disclosed ...
EUVD-2026-92252
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...
CVE-2026-9082
🚨 CVE-2026-9082 : Vulnerabilità di SQL Injection in Drupal Core Vulnerabilità di SQL Injection ad alto impatto in Drupal Core PostgreSQL 📋 Panoramica CVE-2026-9082 è una vulnerabilità di SQL Injection nel livello di astrazione del database di Drupal Core. Colpisce solo i siti che utilizzano...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229
A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
EUVD-2026-92251
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2024-44541
CVE-2024-44541: Vulnerabilità di SQL Injection in Inventio Lite v4 Descrizione Inventio Lite v4 è vulnerabile a SQL Injection SQLi nell'endpoint /action=processlogin. Questa vulnerabilità consente agli aggressori di iniettare query SQL Arbitrarie tramite il parametro username nelle richieste POST...
CVE-2026-105186
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-105187
A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-105185
A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...
CVE-2026-26980
CVE-2026-26980 — 👻 Ghost CMS SQLi non autenticata tramite Content API Una vulnerabilità di SQL injection era presente nella Content API di Ghost e consentiva ad attaccanti non autenticati di leggere dati arbitrari dal database. | ---|--- CVE| CVE-2026-26980 CVSS| 9.4 Critico Versioni interessate|...
CVE-2026-26980-PoC
CVE-2026-26980 — Ghost CMS Content API Blind SQL Injection Affetti: Ghost 3.24.0 – 6.19.0 Corretto in: Ghost 6.19.1 Autenticazione richiesta: Nessuna — la chiave dell'API Content è pubblica Impatto: Lettura non autenticata dell'intero database credenziali, chiavi API Vulnerabilità...
CVE-2019-1698
TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Giorno iniziato: 30/07/2024 Controlla il diff del codice tra la versione vulnerabile e la versione con fix: Riferimento codice 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php...
semcms
Introduzione a Semcms SEMCMS è un sistema di gestione dei contenuti CMS per siti web di commercio estero che supporta più lingue. v4.8 Link di download: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Cause delle vulnerabilità: /xcR45qAdmin/SEMCMSMenu.php Riga 66 Codice vulnerabile:...
Royal-Event-Management-System-todate-SQL-Injection-Authenticated
Royal Event Management System - SQL Injection tramite 'todate' Autenticato 1. Descrizione: Royal Event Management System 1.0 consente SQL Injection tramite il parametro 'todate' in /royalevent/btndatesreport.php?= Lo sfruttamento di questo problema potrebbe permettere a un attaccante di...