CVE-2026-111992

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

CVE-2026-111992 itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

CVE-2026-111992

A SQL injection vulnerability exists in the Exam Module of the itsmeravitejak Online-Examination-System (versions up to e6208e630b14657999bbfe4c9912302d2a1e2449). The flaw is located within the Exam::startExam function in the exam.php file, where improper handling of the topicid argument allows f...

CVE-2026-111992 itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

EUVD-2026-103978

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation of the argument topicid results in sql injection. The attack...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from operations on the parameters fno/fid/fname/flocallity/fac/fphone in the mysqliquery function within the file farmers/add.php. It may lead to SQL injection attacks, and attackers could exploit this...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

aircheng-org iWebShop: Input validation error vulnerability

The aircheng-org iWebShop version 5.0 to 5.16 contains security vulnerabilities. These vulnerabilities stem from improper handling of the Util::search function in the classes/util.php file. They may lead to SQL injection attacks, and attackers can launch attacks remotely...

Subhajitkhan Online-Clinic-Management-System: Input Verification Error Vulnerability

The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the parameter ‘docid’ in the ‘adminmindocview.php’ file within the ‘Administrative Mutation Handler’ component. This could lead to SQL injection attacks, and the...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters such as id, name, title, year, gender, fromdate, and todate by the mysqliquery function in the Registration-Edit Handler component’s doedit.php file. This may lead to S...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘fno/farmer’ in the ‘payment/pay.php’ file using the ‘mysqlirealescapestring’ function. It may lead to SQL injection attacks, and attackers could exploit this...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters in the dodelete.php file within the Registration-Delete Handler component. It may lead to SQL injection attacks, and attackers could execute commands remotely...

openGauss-server Buffer Error Vulnerability

The openGauss-server versions 2.1.0, 3.0.0 to 3.0.6, 3.1.0, 5.0.0 to 5.0.5, 5.1.0, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 have a buffer error vulnerability. This vulnerability arises from the HllObjectUnpack unpacking function, which does not verify the relationship between lenTotal...

NocoBase SQL injection vulnerability

NocoBase 2.2.28 and earlier versions have a SQL injection vulnerability. This vulnerability arises from bypassing checkSQL by using the sqlCollection:setFields operation, allowing unvalidated SQL to be executed, which may lead to SQL injection. This could result in reading the pgshadow password...

Itsourcecode Online Cake Ordering System: Input validation error vulnerability

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from incorrect operations with the parameter epayrollno in the file employees/delete.php, which may lead to SQL injection...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file Officers/searchOff.php, specifically the parameter Search, which may lead to SQL injection attacks...

Integratec SQL injection vulnerability

Integratec has a SQL injection vulnerability. This vulnerability stems from an UNION-type SQL injection in the sInfo parameter sent via POST to the /login/apLogin.aspx/start endpoint. It may allow attackers to steal credentials and user information from the database, causing errors and...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability. This vulnerability stems from incorrect handling of parameters such as id/name/offName/crime/dob/arrDate/crimeDate/sex/address/folder/more in the Submission Form component’s file home.php. This could lead to SQL injection...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability, which stems from incorrect handling of the Search parameter in the file search.php. This could lead to SQL injection attacks...