Lucene search
+L

18 matches found

NVD
NVD
•added 2026/10/05 5:17 a.m.•10 views

CVE-2026-105229

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 4:45 a.m.•46 views

CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS0.00263EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 4:45 a.m.•8 views

CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 4:45 a.m.•16 views

EUVD-2026-92251

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 4:45 a.m.•18 views

CVE-2026-105229

A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/05 4:45 a.m.•3 views

CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

6.9CVSS5.5AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•7 views

CVE-2026-105229: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•10 views

PT-2026-104720

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
•added 2026/06/29 2:16 p.m.•36 views

CVE-2026-13568

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of t...

7.5CVSS0.00472EPSS
SaveExploits0References5
NVD
NVD
•added 2026/06/29 2:16 p.m.•26 views

CVE-2026-13570

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/usershandler.php of the component User Registration Endpoint. Performing a manipulation of the argument fullname results in cross site scripting. The attack is possible...

5.1CVSS0.00331EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/06/29 1:15 p.m.•20 views

CVE-2026-13570

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/usershandler.php of the component User Registration Endpoint. Performing a manipulation of the argument fullname results in cross site scripting. The attack is possible...

5.1CVSS4.4AI score0.00331EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/06/29 12:45 p.m.•59 views

CVE-2026-13568 SourceCodester Inventory Management System User Registration Endpoint users_handler.php access control

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of t...

7.5CVSS0.00472EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•4 views

CVE-2026-13570: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/usershandler.php of the component User Registration Endpoint. Performing a manipulation of the argument fullname results in cross site scripting. The attack is possible...

5.1CVSS3.8AI score0.00331EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•5 views

CVE-2026-13568: Improper Access Control

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of t...

7.5CVSS6.9AI score0.00472EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•29 views

PT-2026-53264

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users handler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•31 views

PT-2026-53266

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full name results in cross site scripting. The attack is possib...

5.1CVSS4.4AI score0.00331EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•14 views

PT-2025-48066

Name of the Vulnerable Software and Affected Versions Primakon Pi Portal version 1.0.18 Description The /api/v2/user/register endpoint in Primakon Pi Portal is susceptible to a Broken Access Control issue. The endpoint does not enforce authorization checks, enabling unauthenticated attackers to...

8.6CVSS6.4AI score0.00282EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/06 12:00 a.m.•7 views

CVE-2023-39345: Improper Authentication

strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked as private in the user registration endpoint. As such malicious users may be able to errantly modify their user records. This issue has been addressed in version 4.13.1. Users...

7.6CVSS7AI score0.00588EPSS
SaveExploits1References2
Rows per page
Query Builder