Aggregator

A vulnerability marked as critical has been reported in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_room.php. Performing a manipulation of the argument ID results in sql injection. This vulnerability is cataloged as CVE-2026-14770. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. This vulnerability is listed as CVE-2026-14769. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. This vulnerability is tracked as CVE-2026-14768. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #850645 / VDB-376364

Submit #850644 / VDB-376363

A vulnerability categorized as critical has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoice_no results in sql injection. This vulnerability is identified as CVE-2026-14767. The attack can be executed remotely. Additionally, an exploit exists.

Submit #849108 / VDB-376362

Submit #849107 / VDB-376361

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /apartment-visitor/search-result.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. This vulnerability is referenced as CVE-2026-14766. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #849106 / VDB-376360

互联网最大的「保安」，现在要当最大的「收银员」了。

Submit #849374 / VDB-376359

Submit #849302 / VDB-376358

Submit #850623 / VDB-376357

A vulnerability labeled as problematic has been found in Coastercms 5.8.18. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability was named CVE-2020-35275. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability marked as critical has been reported in EgavilanMedia ECM Address Book 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login Panel. This manipulation causes sql injection. The identification of this vulnerability is CVE-2020-35276. The attack needs to be done within the local network. There is no exploit available.

A vulnerability marked as critical has been reported in TerraMaster TOS up to 4.2.06. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper access controls. This vulnerability is listed as CVE-2020-29189. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in WonderCMS 3.1.3. Affected by this issue is some unknown functionality of the component Admin Panel. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2020-29247. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in EGavilanMedia User Registration and Login System with Admin Panel 1.0 and classified as critical. Impacted is an unknown function of the component User Login Page. The manipulation leads to sql injection. This vulnerability is documented as CVE-2020-29228. The attack requires being on the local network. There is not any exploit available.