CVE-2026-15389: Authorization Bypass Through User-Controlled Key

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

EUVD-2017-9097

Malware in sbrugna...

EUVD-2025-26153

Malicious code in bioql PyPI...

CVE-2025-9593

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-9593

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-9593 itsourcecode Apartment Management System unit_status_info.php sql injection

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-9593 itsourcecode Apartment Management System unit_status_info.php sql injection

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

PT-2025-35150

Name of the Vulnerable Software and Affected Versions itsourcecode Apartment Management System version 1.0 Description A SQL injection flaw exists due to manipulation of the usid argument in the /report/unit status info.php file. The attack can be executed remotely. The exploit has been published...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter usid in the file /report/unitstatusinfo.php. An attacker can exploit...

CVE-2025-9593: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2017-17959

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00081)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability (CNVD-2018-00089)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. PHP Scripts Mall PHP Multivendor Ecommerce suffers from a SQL injection vulnerability. The vulnerability can be exploited by an...

CVE-2017-17959

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

CVE-2017-17954

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...

Sql injection

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

CVE-2017-17959

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

PT-2017-15125

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the usid parameter in the...

CVE-2017-17959: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

PT-2017-15130

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which can be exploited via the usid parameter in the "seller-view.php" API endpoint. Recommendations For PHP Scripts...