CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172

The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...

CVE-2026-37719

An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...

PT-2026-104712

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

PT-2026-104671

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

PT-2026-104713

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-104689

Name of the Vulnerable Software and Affected Versions battery affected versions not specified Description A missing bounds check in the battery component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This can lead to local...

PT-2026-104672

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli real escape string of the file /Admin/add symptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It...

PT-2026-104690

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundar...

PT-2026-104695

Name of the Vulnerable Software and Affected Versions aidl affected versions not specified Description A missing permission check in aidl allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it requires no user...

PT-2026-104707

Name of the Vulnerable Software and Affected Versions mtee affected versions not specified Description A type confusion issue exists in mtee, which may allow a local escalation of privilege. This occurs if a malicious actor has already obtained System privilege. Exploitation does not require user...

PT-2026-104693

Name of the Vulnerable Software and Affected Versions Display affected versions not specified Description An integer overflow in display allows for a local escalation of privilege. This occurs if a malicious actor has already obtained System privilege. Exploitation does not require user...

PT-2026-104675

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

PT-2026-104664

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add student.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

PT-2026-104715

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

PT-2026-104714

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

PT-2026-104716

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

PT-2026-104717

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

PT-2026-104783

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

PT-2026-104771

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...