Lucene search
+L

1057 matches found

Vulnrichment
Vulnrichment
added 2026/01/19 3:2 a.m.4 views

CVE-2026-1135 itsourcecode Society Management System activity.php cross site scripting

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

5.3CVSS3.9AI score0.00318EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/19 3:2 a.m.33 views

CVE-2026-1135

CVE-2026-1135 affects itsourcecode Society Management System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/activity.php function where modifying the Title parameter enables script injection. Exploitation is possible remotely and public exploits exist. Multiple connected sour...

6.1CVSS5.4AI score0.00318EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/19 3:2 a.m.36 views

CVE-2026-1135 itsourcecode Society Management System activity.php cross site scripting

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

5.3CVSS0.00318EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/19 3:2 a.m.7 views

CVE-2026-1135

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

6.1CVSS3.9AI score0.00318EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.15 views

PT-2026-3422

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

5.3CVSS5.6AI score0.00318EPSS
SaveExploits1References5
CNVD
CNVD
added 2026/01/19 12:0 a.m.7 views

Intern Membership Management System /add_activity.php File SQL Injection Vulnerability

Intern Membership Management System is an intern membership management system. The Intern Membership Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the Title parameter in the file /intern/admin/addactivity.php for externally entered SQL...

7.2CVSS6AI score0.00336EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/01/19 12:0 a.m.13 views

Itsourcecode Society Management System Code Injection Vulnerability

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “Title” in the file...

6.1CVSS5.7AI score0.00318EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/18 11:15 a.m.9 views

CVE-2026-1118

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/18 10:32 a.m.6 views

CVE-2026-1118 itsourcecode Society Management System add_activity.php sql injection

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...

6.5CVSS5.6AI score0.00323EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/18 10:32 a.m.6 views

CVE-2026-1118

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...

9.8CVSS5.4AI score0.00323EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/01/18 12:0 a.m.12 views

Itsourcecode Society Management System SQL Injection Vulnerability

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Title” in the file...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/18 12:0 a.m.13 views

PT-2026-3386

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A SQL injection issue exists in itsourcecode Society Management System 1.0. The issue is located in the file /admin/add activity.php. Manipulating the Title argument can lead to SQ...

9.8CVSS6.5AI score0.00323EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.13 views

CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

5.4CVSS6.9AI score0.00498EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:34 p.m.8 views

CVE-2023-31800

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter...

5.4CVSS6.8AI score0.00417EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:30 p.m.7 views

CVE-2023-40877

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...

5.4CVSS6.2AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:41 a.m.15 views

CVE-2022-26624

Bootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting XSS vulnerability via the Title parameter in /vendor/views/addproduct.php...

6.1CVSS6.2AI score0.00902EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.18 views

PT-2026-1979

Name of the Vulnerable Software and Affected Versions Intern Membership Management System version 1.0 Description A SQL injection issue exists in the Intern Membership Management System. The issue is located in the file /intern/admin/add activity.php. Manipulation of the Title argument can lead t...

7.2CVSS5.5AI score0.00336EPSS
SaveExploits1References10
NVD
NVD
added 2026/01/05 9:15 a.m.11 views

CVE-2026-0582

A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/editactivityquery.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

9.8CVSS0.00282EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/05 8:32 a.m.8 views

EUVD-2026-0900

A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/editactivityquery.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

6.5CVSS6.3AI score0.00282EPSS
SaveExploits1References7
CVE
CVE
added 2026/01/05 8:32 a.m.38 views

CVE-2026-0582

The CVE pertains to itsourcecode Society Management System 1.0. A SQL injection vulnerability exists in the file /admin/edit_activity_query.php triggered by manipulating the Title parameter, with exploitation described as remote and publicly available. Affected component/file: /admin/edit_activit...

9.8CVSS6.5AI score0.00282EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder