EUVD-2026-98287

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...

CVE-2026-108967 SourceCodester Performance Indicator System edit_credit.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...

CVE-2026-108967

A security flaw exists in SourceCodester Performance Indicator System 1.0 within the /opils/staff/edit_credit.php file. An SQL injection vulnerability occurs due to the improper handling of the credit argument. This flaw can be triggered remotely , potentially allowing an attacker to manipulate t...

CVE-2026-108965

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-108964

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

EUVD-2026-98286

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-108966 SourceCodester Performance Indicator System product.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-108966

The SourceCodester Performance Indicator System 1.0 is vulnerable to an SQL injection flaw within the /opils/staff/product.php file. The vulnerability occurs during the processing of the Category argument, which allows an attacker to initiate a remote attack. While the documents state that an exp...

EUVD-2026-98280

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-108965 SourceCodester Performance Indicator System edit_quantity.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-108965

The SourceCodester Performance Indicator System 1.0 is vulnerable to SQL injection due to a flaw in the code of the file /opils/staff/edit_quantity.php . An attacker can remotely trigger this vulnerability by manipulating the pqty argument. The exploit has been publicly disclosed and may be utili...

EUVD-2026-98278

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2026-108964 SourceCodester Performance Indicator System addproduct.php sql injection

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2026-108964

The SourceCodester Performance Indicator System 1.0 is vulnerable to a remote SQL injection flaw located in the /opils/admin/addproduct.php file. An attacker can exploit this by manipulating the prodcategory argument. While the specific component within the file is not detailed, the vulnerability...

CVE-2026-108959

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-108959 itsourcecode Online Cake Ordering System addtransacdetail.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-98269

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-108959

A SQL injection vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw impacts an unknown function within the /addtransacdetail.php file, where manipulating the ID argument allows for remote execution. The exploit has been disclosed publicly and may be used. No specif...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Vendor - PHPGurukul Product -https://phpgurukul.com/hostel-management-system V2.1 Vulnerability Type - Cross Site Scripting XSS Addition Information - XSS wil...

CVE-2026-85529

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to...