Lucene search
+L

527 matches found

NVD
NVD
•added 2026/10/02 2:17 p.m.•18 views

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

6.5CVSS0.002EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/02 1:15 p.m.•18 views

CVE-2026-104613 CodeAstro Simple Pharmacy Management System view.php sql injection

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/02 1:15 p.m.•24 views

EUVD-2026-91632

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

5.3CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/02 1:15 p.m.•58 views

CVE-2026-104613 CodeAstro Simple Pharmacy Management System view.php sql injection

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

6.5CVSS0.002EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/02 1:15 p.m.•26 views

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•11 views

CVE-2026-104613: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•15 views

PT-2026-104329

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

6.3CVSS6.5AI score0.002EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/30 3:16 a.m.•21 views

CVE-2026-102908

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to laun...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/30 2:45 a.m.•25 views

CVE-2026-102908

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a SQL injection flaw within the /reviewer_0/admins/assessments/examproper/questions-view.php file. An attacker can exploit this by manipulating the ID argument to perform unauthorized database queries. The vulnerability is ...

7.5CVSS5.7AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 2:45 a.m.•21 views

EUVD-2026-89582

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to laun...

7.5CVSS5.7AI score0.00263EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/30 2:45 a.m.•13 views

CVE-2026-102908 SourceCodester Online Reviewer Management System questions-view.php sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to laun...

7.5CVSS5.7AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/30 2:45 a.m.•38 views

CVE-2026-102908 SourceCodester Online Reviewer Management System questions-view.php sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to laun...

7.5CVSS0.00263EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•15 views

CVE-2026-102908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to laun...

7.5CVSS5.7AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/06 12:00 a.m.•69 views

PT-2026-86477

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans view.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/07 12:31 a.m.•21 views

EUVD-2026-54207

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

5.3CVSS5.3AI score0.00374EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/06 10:16 p.m.•19 views

CVE-2026-19064

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

5.3CVSS0.00374EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/06 5:30 p.m.•67 views

CVE-2026-19064

The CVE-2026-19064 entry describes a vulnerability in SourceCodester Online Examination & Learning Management System 1.0 where manipulation of the ID parameter in /view.php leads to an authorization bypass. The issue is exploitable remotely and affects unknown code paths within the /view.php file...

5.3CVSS5.3AI score0.00374EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•8 views

PT-2026-68670

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

5.3CVSS5.6AI score0.00374EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•9 views

CVE-2026-19064: Authorization Bypass Through User-Controlled Key

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

5.3CVSS5.3AI score0.00374EPSS
SaveExploits0References3
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•7 views

Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion Detection

In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """In avataruploader v7.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclie...

7.5CVSS7.3AI score0.55079EPSS
SaveExploits7References6
Rows per page
Query Builder