Aggregator

Submit #844110 / VDB-374568

A vulnerability labeled as critical has been found in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability is handled as CVE-2026-13559. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability identified as problematic has been detected in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Report Handler. Performing a manipulation of the argument Report Title results in cross site scripting. This vulnerability is known as CVE-2026-13558. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #843881 / VDB-365626

A vulnerability categorized as problematic has been discovered in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/mod_room/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. This vulnerability is traded as CVE-2026-13557. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in itsourcecode Online Hotel Management System 1.0. It has been rated as problematic. This affects an unknown part of the file /admin/mod_users/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. This vulnerability appears as CVE-2026-13556. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in itsourcecode Online Hotel Management System 1.0. It has been declared as critical. Affected by this issue is some unknown functionality of the file /admin/mod_users/controller.php?action=add. The manipulation of the argument Name results in sql injection. This vulnerability is reported as CVE-2026-13555. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in itsourcecode Online Hotel Management System 1.0. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/mod_amenities/controller.php?action=add of the component POST Request Handler. The manipulation of the argument Name leads to cross site scripting. This vulnerability is documented as CVE-2026-13554. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in itsourcecode Online Hotel Management System 1.0 and classified as critical. Affected is an unknown function of the file /admin/mod_amenities/controller.php?action=add. Executing a manipulation of the argument image can lead to unrestricted upload. This vulnerability is registered as CVE-2026-13553. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability has been found in itsourcecode Online Hotel Management System 1.0 and classified as critical. This impacts an unknown function of the file /admin/mod_amenities/controller.php?action=edit. Performing a manipulation of the argument amen_id results in sql injection. This vulnerability is cataloged as CVE-2026-13552. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #843806 / VDB-319151

Submit #843782 / VDB-374567

Submit #843714 / VDB-374566

Submit #843587 / VDB-374565

Submit #843586 / VDB-374564

Submit #843585 / VDB-374563

Submit #843584 / VDB-374562

Submit #843570 / VDB-374561

Submit #843569 / VDB-374560

AI 时代下软件保护对抗的现状与趋势 by ourren

更多最新文章，请访问SecWiki