Lucene search
+L

4531 matches found

EUVD
EUVD
added 2026/04/05 3:30 a.m.10 views

EUVD-2026-19011

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.6AI score0.00204EPSS
SaveExploits0References6
NVD
NVD
added 2026/04/05 2:16 a.m.17 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS0.00204EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/05 1:0 a.m.15 views

CVE-2026-5531

CVE-2026-5531 affects SourceCodester Student Result Management System 1.0. The vulnerability is in the HTTP GET Request Handler, impacting the file /login_credentials.txt where login credentials may be stored in cleartext on disk. The issue can be triggered remotely, and public disclosures exist....

6.9CVSS5.6AI score0.00204EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/05 1:0 a.m.6 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.4AI score0.00204EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 1:0 a.m.3 views

CVE-2026-5531 SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.6AI score0.00204EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.11 views

SourceCodester Student Result Management System 安全漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a security vulnerability, which stems from data being stored in plaintext in the file...

6.9CVSS6AI score0.00204EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.11 views

PT-2026-30402

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated...

6.9CVSS5.4AI score0.00204EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/04/01 5:3 p.m.8 views

CVE-2026-5198

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS6.8AI score0.00344EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/01 10:58 a.m.4 views

CVE-2026-5195

A flaw has been found in code-projects Student Membership System 1.0. This issue affects some unknown processing of the component User Registration Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely...

7.5CVSS6.8AI score0.00259EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/01 10:58 a.m.5 views

CVE-2026-5197

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/31 12:31 p.m.7 views

EUVD-2026-17399

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS5.7AI score0.00344EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/03/31 12:31 p.m.4 views

EUVD-2026-17353

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

6.5CVSS5.8AI score0.00192EPSS
SaveExploits0References6
NVD
NVD
added 2026/03/31 12:16 p.m.5 views

CVE-2026-5198

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS0.00344EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/31 11:0 a.m.37 views

CVE-2026-5198 code-projects Student Membership System Admin Login index.php sql injection

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS0.00344EPSS
SaveExploits0References5
CVE
CVE
added 2026/03/31 11:0 a.m.13 views

CVE-2026-5198

CVE-2026-5198 affects code-projects Student Membership System 1.0. The vulnerability lies in the Admin Login component, specifically an unknown function in /admin/index.php that manipulates the username/password parameters to cause SQL injection. Remote exploitation is possible, and the exploit h...

7.5CVSS6.8AI score0.00344EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/31 11:0 a.m.1 views

CVE-2026-5198

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS5.7AI score0.00344EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/31 11:0 a.m.2 views

CVE-2026-5198 code-projects Student Membership System Admin Login index.php sql injection

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS6.8AI score0.00344EPSS
SaveExploits0References5
NVD
NVD
added 2026/03/31 10:16 a.m.7 views

CVE-2026-5197

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00192EPSS
SaveExploits0References5
CVE
CVE
added 2026/03/31 10:0 a.m.9 views

CVE-2026-5197

The CVE-2026-5197 entry concerns code-projects Student Membership System 1.0. Affected component: an unknown function in /delete_user.php where manipulation of the ID parameter yields an SQL injection. The threat is remote and the exploit is public. No remediation details are provided in the docu...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/31 10:0 a.m.30 views

CVE-2026-5197 code-projects Student Membership System delete_user.php sql injection

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00192EPSS
SaveExploits0References5
Rows per page
Query Builder