CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

EUVD-2026-93226

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-104983

A flaw was found in Xreader. A remote attacker could provide a crafted document containing a malicious attachment filename that bypasses directory restrictions. If a user attempts to save the attachment, arbitrary files may be written or overwritten outside the intended target directory,...

EUVD-2026-93224

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2026-105808

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within the clean function of the searchresults.php file. An attacker can perform a remote manipulation of the searchbox argument to execute the XSS attack. The exploit h...

CVE-2026-105807

A SQL injection vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within an unspecified part of the searchquery.php file, where improper input handling allows for remote manipulation. An attacker can exploit this to execute arbitrary SQL commands. ...

EUVD-2026-93018

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105807 SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-57555

Memory Corruption when executing system service routines due to improper handling of user input buffers...

EUVD-2026-92983

Memory Corruption when executing system service routines due to improper handling of user input buffers...

WSUS-CVE-2025-59287-RCE

WSUS-CVE-2025-59287-RCE CVE-2025-59287 es una vulnerabilidad de ejecución remota de código crítica CVSS 9.8 que afecta a TODOS los Microsoft Windows Server Update Services, también conocidos como WSUS, y ha sido explotada en ataques reales. La vulnerabilidad explota una deserialización insegura e...

CVE-2026-105706

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

CVE-2026-105705

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105704

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2026-105706

A cross-site request forgery (CSRF) vulnerability exists in the SourceCodester Drug Recommendation System 1.0 . The flaw is located in an unspecified function, allowing a remote attacker to perform unauthorized actions. The documents indicate that a proof-of-concept exploit is publicly available,...

CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

EUVD-2026-92947

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...