Browse CVEs

CRITICAL 9.8 CVE-2022-26283 Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnera… Simple Subscription Website No fix yet Fix from $2,3002022-03-21 CRITICAL 9.8 CVE-2021-45435 An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php. Simple Cold Storage Management System No fix yet Fix from $2,3002022-01-28 CRITICAL 9.8 CVE-2021-41659 SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or … Banking System No fix yet Fix from $2,3002022-01-24 CRITICAL 9.8 CVE-2021-40596 SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands… Online Learning System No fix yet Fix from $2,3002022-01-24 CRITICAL 9.8 CVE-2021-40247 SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands v… Budget And Expense Tracker System No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2021-46309 An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter. Employee And Visitor Gate Pass Logging System No fix yet Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2021-46200 An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php. Simple Music Cloud Community System No fix yet Fix from $2,3002022-01-21 HIGH 7.5 CVE-2021-44600 The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the passwor… Simple Online Men\'s Salon Management System No fix yet Fix from $1,9502021-12-23 CRITICAL 9.8 CVE-2021-45252 Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_topic.php, … Simple Forum\/discussion System No fix yet Fix from $2,3002021-12-21 CRITICAL 9.8 CVE-2021-44653EPSS 6% Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed du… Online Magazine Management System No fix yet Fix from $2,3002021-12-15 CRITICAL 9.8 CVE-2021-42580EPSS 10% Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and authenticat… Online Learning System No fix yet Fix from $2,3002021-11-15 CRITICAL 9.8 CVE-2021-43140 SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login. Simple Subscription Website No fix yet Fix from $2,3002021-11-03 MEDIUM 6.1 CVE-2021-43141 Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application. Simple Subscription Website No fix yet Fix from $1,6002021-11-03 CRITICAL 9.8 CVE-2021-41644 Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses th… Online Food Ordering System No fix yet Fix from $2,3002021-10-29 HIGH 8.8 CVE-2021-41645 Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to injec… Budget And Expense Tracker System No fix yet Fix from $1,9502021-10-29