Lucene search
+L

287929 matches found

Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•11 views

PT-2026-117271

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap Login.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

8.8CVSS6AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•12 views

PT-2026-117243

A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the publi...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/10/19 12:00 a.m.•7 views

Senayan Library Management System SLiMS 9 Bulian security vulnerability

The Senayan Library Management System SLiMS version 9.8.0 contains a security vulnerability. This vulnerability stems from identifier injection in the tableName and tableFields POST parameters of the admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php,...

6.2AI score0.00487EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•9 views

PT-2026-117461

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli error of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•9 views

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a remote attacker to execute arbitrary SQL queries...

6.8CVSS7.3AI score0.00426EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/18 11:45 p.m.•11 views

CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

5.8CVSS5.1AI score0.0021EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/18 11:45 p.m.•55 views

CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

5.8CVSS0.0021EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/18 11:45 p.m.•24 views

CVE-2026-112032

A SQL injection vulnerability exists in aircheng-org iWebShop-5 versions up to 5.16 . The flaw is located in the Util::search function within the classes/util.php file. An attacker can initiate this attack remotely to manipulate database queries. While the project was notified early via an issue ...

5.8CVSS5.1AI score0.0021EPSS
SaveExploits0References6
Mend
Mend
•added 2026/10/18 11:45 p.m.•11 views

CVE-2026-112032

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

5.8CVSS5.1AI score0.0021EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/10/18 11:45 p.m.•12 views

CVE-2026-112032 aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was...

5.1CVSS5.4AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/10/18 9:31 p.m.•27 views

EUVD-2025-26308

A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file loginattendance2.php. Performing manipulation of the argument employeeid/date results in sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.1AI score0.00509EPSS
SaveExploits1References6
NVD
NVD
•added 2026/10/18 5:16 p.m.•18 views

CVE-2026-111992

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

6.5CVSS0.00241EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/18 4:45 p.m.•42 views

CVE-2026-111992 itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

6.5CVSS0.00241EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/18 4:45 p.m.•25 views

CVE-2026-111992

A SQL injection vulnerability exists in the Exam Module of the itsmeravitejak Online-Examination-System (versions up to e6208e630b14657999bbfe4c9912302d2a1e2449). The flaw is located within the Exam::startExam function in the exam.php file, where improper handling of the topicid argument allows f...

6.5CVSS6.2AI score0.00241EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/18 4:45 p.m.•10 views

CVE-2026-111992 itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

6.5CVSS6.2AI score0.00241EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/18 4:45 p.m.•20 views

EUVD-2026-103978

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

6.5CVSS6.3AI score0.00241EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/10/18 4:00 p.m.•12 views

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from operations on the parameters fno/fid/fname/flocallity/fac/fphone in the mysqliquery function within the file farmers/add.php. It may lead to SQL injection attacks, and attackers could exploit this...

6.5CVSS6.5AI score0.00251EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/10/18 4:00 p.m.•14 views

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/10/18 4:00 p.m.•19 views

aircheng-org iWebShop: Input validation error vulnerability

The aircheng-org iWebShop version 5.0 to 5.16 contains security vulnerabilities. These vulnerabilities stem from improper handling of the Util::search function in the classes/util.php file. They may lead to SQL injection attacks, and attackers can launch attacks remotely...

5.8CVSS5.5AI score0.0021EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/10/18 4:00 p.m.•10 views

Subhajitkhan Online-Clinic-Management-System: Input Verification Error Vulnerability

The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the parameter ‘docid’ in the ‘adminmindocview.php’ file within the ‘Administrative Mutation Handler’ component. This could lead to SQL injection attacks, and the...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder