63 resultados
2.7Baja
CVE-2026-36920
janobe online reviewer system

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.

2.7Baja
CVE-2026-36919
janobe online reviewer system

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.

9.8Crítica
CVE-2026-36236
janobe engineers online portal

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.

6.3Media
CVE-2026-3806

SourceCodester/janobe Resort Reservation System room_rates.php sql injection

SourceCodester Resort Reservation System; janobe Resort Reservation System

A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The …

7.3Alta
CVE-2026-2090

SourceCodester Online Class Record System search.php sql injection

SourceCodester Online Class Record System

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be execu…

7.3Alta
CVE-2026-2087

SourceCodester Online Class Record System login.php sql injection

SourceCodester Online Class Record System

A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the argument user_email causes sql injection. The attack may be initiated remotely.…

7.3Alta
CVE-2025-13257

itsourcecode Inventory Management System index.php sql injection

itsourcecode Inventory Management System

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be …

6.3Media
CVE-2025-13236

itsourcecode Inventory Management System index.php sql injection

itsourcecode Inventory Management System

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely.…

7.3Alta
CVE-2025-13235

itsourcecode Inventory Management System login.php sql injection

itsourcecode Inventory Management System

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument user_email can lead to sql injection. It is possible to launch the attack rem…

6.3Media
CVE-2025-13234

itsourcecode Inventory Management System index.php sql injection

itsourcecode Inventory Management System

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the att…

7.3Alta
CVE-2025-13233

itsourcecode Inventory Management System index.php sql injection

itsourcecode Inventory Management System

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from rem…

4.7Media
CVE-2025-13210

itsourcecode Inventory Management System index.php sql injection

itsourcecode Inventory Management System

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be p…

6.3Media
CVE-2025-12933

SourceCodester Baby Care System updatewelcome.php sql injection

SourceCodester Baby Care System

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remot…

4.7Media
CVE-2025-12932

SourceCodester Baby Care System admin.php sql injection

SourceCodester Baby Care System

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. Th…

6.3Media
CVE-2025-12931

SourceCodester Food Ordering System edit-orders.php sql injection

SourceCodester Food Ordering System

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the a…

6.3Media
CVE-2025-12930

SourceCodester Food Ordering System view-ticket.php sql injection

SourceCodester Food Ordering System

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha…

6.3Media
CVE-2025-12926

SourceCodester Farm Management System review.php sql injection

SourceCodester Farm Management System

A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The ex…