Lucene search
K

52 matches found

RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.3 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00246EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/05 9:30 a.m.2 views

EUVD-2026-19052

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00246EPSS
Exploits0References6
NVD
NVD
added 2026/04/05 9:16 a.m.2 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS0.00246EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/05 8:30 a.m.2 views

CVE-2026-5552 PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00246EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:30 a.m.2 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00246EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/05 8:30 a.m.29 views

CVE-2026-5552 PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS0.00246EPSS
Exploits0References5
CVE
CVE
added 2026/04/05 8:30 a.m.9 views

CVE-2026-5552

CVE-2026-5552 concerns a SQL injection in PHPGurukul Online Shopping Portal Project 2.1. The issue is tied to the Parameter Handler component, specifically the file /sub-category.php where manipulation of the pid argument enables SQL injection. Remote exploitation is described as possible, and pu...

6.5CVSS6.4AI score0.00246EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.3 views

PT-2026-30422

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00246EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.6 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project of PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “pid” in the...

6.5CVSS6.7AI score0.00246EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2010-2687

Malware in sbrugna...

7.5CVSS6.4AI score0.01003EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-52309

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01026EPSS
Exploits1References1
CVE
CVE
added 2025/08/25 11:2 p.m.16 views

CVE-2025-9426

CVE-2025-9426 affects itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is a SQL injection in an unknown part of the file /package.php triggered by manipulating the subcatid parameter. Exploitation is network-based and can be performed remotely; several sources note tha...

9.8CVSS7.4AI score0.00387EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 11:41 p.m.1 views

CVE-2022-40934

Online Pet Shop We App v1.0 is vulnerable to SQL injection via /petshop/classes/Master.php?f=deletesubcategory,id...

7.2CVSS7.5AI score0.00821EPSS
Exploits1References1
OSV
OSV
added 2024/07/24 3:15 p.m.4 views

CVE-2024-7068

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

4.6CVSS3.9AI score0.00422EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/07/24 3:0 p.m.32 views

CVE-2024-7068 SourceCodester Insurance Management System update_sub_category cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

5.3CVSS0.00422EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/02/20 8:0 a.m.30 views

CVE-2024-25973 Multiple Stored Cross-Site Scripting Vulnerabilities

The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting XSS vulnerabilities. An attacker with rights to create or edit groups can create a course with a name that contains an XSS payload. Furthermore, attackers with the permissions to create or rename a catalog...

5.1AI score0.00561EPSS
Exploits3References2
OSV
OSV
added 2023/04/08 11:15 a.m.1 views

CVE-2023-1958

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=deletesubcategory. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.5AI score
Exploits0References3
OSV
OSV
added 2023/04/08 11:15 a.m.1 views

CVE-2023-1957

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=savesubcategory of the component Subcategory Handler. The manipulation of the argument...

8.8CVSS6.5AI score0.00717EPSS
Exploits1References3
Prion
Prion
added 2023/04/08 11:15 a.m.17 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=deletesubcategory. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

6.5CVSS9.7AI score0.00726EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/04/08 12:0 a.m.5 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

9.8CVSS7.9AI score0.00726EPSS
Exploits1References4
Rows per page
Query Builder