Lucene search
K

69 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.2 views

CVE-2026-36922

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/viewcategory.php...

2.7CVSS5.8AI score0.00225EPSS
Exploits1References1
NVD
NVD
added 2026/04/13 1:16 p.m.1 views

CVE-2026-36922

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/viewcategory.php...

2.7CVSS0.00225EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.3 views

SourceCodester Cab Management System 安全漏洞

SourceCodester Cab Management System is an open-source taxi management system developed by SourceCodester. Version 1.0 of the SourceCodester Cab Management System has a security vulnerability, which stems from SQL injection in the /cms/admin/categories/viewcategory.php file...

2.7CVSS5.8AI score0.00225EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/13 12:0 a.m.1 views

CVE-2026-36922

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/viewcategory.php...

5.8AI score0.00225EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/13 12:0 a.m.26 views

CVE-2026-36922

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/viewcategory.php...

0.00225EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.4 views

CVE-2026-30571

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewcategory.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS6AI score0.00266EPSS
Exploits1References1
NVD
NVD
added 2026/03/27 5:16 p.m.2 views

CVE-2026-30571

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewcategory.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS0.00266EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/27 12:0 a.m.1 views

CVE-2026-30571

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewcategory.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS6AI score0.00266EPSS
Exploits1References2
CVE
CVE
added 2026/03/27 12:0 a.m.6 views

CVE-2026-30571

CVE-2026-30571 affects SourceCodester Sales and Inventory System 1.0, specifically the view_category.php file where the limit parameter is not sanitized, enabling a reflected XSS. An attacker can craft a URL to inject arbitrary web script/HTML, which would execute in a victim’s browser. The explo...

6.1CVSS6AI score0.00266EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/27 12:0 a.m.1 views

CVE-2026-30571

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewcategory.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6AI score0.00266EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.3 views

CVE-2026-4569

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS6.5AI score0.0025EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/23 6:30 a.m.5 views

EUVD-2026-14353

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS6.5AI score0.0025EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/03/23 2:59 a.m.4 views

CVE-2026-4569

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS5.7AI score0.0025EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/23 2:59 a.m.2 views

CVE-2026-4569 SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS6.5AI score0.0025EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/23 12:0 a.m.4 views

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...

6.5CVSS6.7AI score0.0025EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.7 views

PT-2026-27042

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System 1.0. The issue is related to the manipulation of the searchtxt argument within an HTTP POST request to...

6.5CVSS6.6AI score0.0025EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2026/03/03 1:48 a.m.3 views

CVE-2026-26704

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/viewcategory.php...

9.8CVSS6AI score0.00393EPSS
Exploits1References1
OSV
OSV
added 2026/03/02 6:16 p.m.2 views

CVE-2026-26704

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/viewcategory.php...

9.8CVSS5.9AI score0.00393EPSS
Exploits1References1
NVD
NVD
added 2026/03/02 6:16 p.m.7 views

CVE-2026-26704

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/viewcategory.php...

9.8CVSS0.00393EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/02 12:0 a.m.1 views

EUVD-2026-9218

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/viewcategory.php...

6AI score0.00393EPSS
Exploits1References1
Rows per page
Query Builder