Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2829▼ 255 respecto a la semana anterior
Críticas / altas1324▼ 180 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)214▼ 107 respecto a la semana anterior
3978 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Baja (2.1) | 0.38% | — | Campcodes Online Beauty Parlor Management System | 22/9/2025 | 17/6/2026 | A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Executing manipulation of the argument sername can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be… | |
| Analizada | Baja (2.1) | 0.38% | — | Campcodes Online Beauty Parlor Management System | 22/9/2025 | 17/6/2026 | A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploit has been made public… | |
| Analizada | Media (5.5) | 0.60% | — | Fabian Online Bidding System | 22/9/2025 | 17/6/2026 | A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. | |
| Analizada | Media (5.5) | 0.48% | — | Emiloi Online Discussion Forum | 22/9/2025 | 17/6/2026 | A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and… | |
| Analizada | Media (5.5) | 0.59% | — | Fabian Online Bidding System | 22/9/2025 | 17/6/2026 | A vulnerability has been found in code-projects Online Bidding System 1.0. This affects an unknown part of the file /administrator/bidupdate.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. | |
| Analizada | Media (5.5) | 0.59% | — | Fabian Online Bidding System | 22/9/2025 | 17/6/2026 | A weakness has been identified in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/index.php. This manipulation of the argument aduser causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could… | |
| Analizada | Media (5.5) | 0.48% | — | Fabian Online Hotel Reservation System | 22/9/2025 | 17/6/2026 | A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. | |
| Analizada | Media (5.5) | 0.48% | — | Fabian Online Hotel Reservation System | 22/9/2025 | 17/6/2026 | A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and… | |
| Analizada | Media (5.5) | 0.55% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_subject.php. The manipulation of the argument subject_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_subject.php. Executing manipulation of the argument subject_code can lead to sql injection. The attack may be performed from remote. The exploit has been… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument class_name results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Learning Management System | 22/9/2025 | 17/6/2026 | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_class.php. Such manipulation of the argument class_name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. | |
| Analizada | Media (5.5) | 0.43% | — | Emiloi Online Discussion Forum | 18/9/2025 | 17/6/2026 | A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. | |
| Analizada | Media (5.5) | 0.53% | — | Emiloi Online Discussion Forum | 18/9/2025 | 17/6/2026 | A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_msg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the… | |
| Analizada | Media (5.5) | 0.43% | — | Phpgurukul Online Course Registration | 18/9/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. | |
| Analizada | Baja (2) | 0.29% | — | Facebook-riares Online Petshop Management System | 18/9/2025 | 17/6/2026 | A security flaw has been discovered in itsourcecode Online Petshop Management System 1.0. The affected element is an unknown function of the file availableframe.php of the component Admin Dashboard. The manipulation of the argument name/address results in cross site scripting. It is possible to launch the attack… | |
| Analizada | Baja (2) | 0.29% | — | Facebook-riares Online Petshop Management System | 18/9/2025 | 17/6/2026 | A vulnerability was identified in itsourcecode Online Petshop Management System 1.0. Impacted is an unknown function of the file addcnp.php of the component Available Products Page. The manipulation of the argument name/description leads to cross site scripting. It is possible to initiate the attack remotely. The… | |
| Analizada | Baja (2.1) | 0.34% | — | Janobe Online Exam Form Submission | 18/9/2025 | 17/6/2026 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/delete_user.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. | |
| Analizada | Baja (2.1) | 0.34% | — | Janobe Online Exam Form Submission | 18/9/2025 | 17/6/2026 | A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/update_s3.php. This manipulation of the argument credits causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. | |
| Analizada | Baja (2.1) | 0.39% | — | Angeljudesuarez Online Clinic Management System | 17/9/2025 | 17/6/2026 | Se ha encontrado una falla en itsourcecode Online Clinic Management System 1.0. Esta vulnerabilidad afecta código desconocido del archivo /editp2.php. La manipulación del argumento id/firstname/lastname/type/age/address puede llevar a una inyección SQL. El ataque puede ejecutarse de forma remota. El exploit ha sido… | |
| Analizada | Baja (2.1) | 0.34% | — | Janobe Online Exam Form Submission | 17/9/2025 | 25/9/2026 | Se detectó una vulnerabilidad en SourceCodester Online Exam Form Submission 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /user/dashboard.php?page=update_profile. La manipulación del argumento 'phone' resulta en inyección SQL. El ataque puede ser lanzado remotamente. El exploit es… | |
| Analizada | Baja (2.1) | 0.49% | — | Angeljudesuarez Online Clinic Management System | 17/9/2025 | 25/9/2026 | Una vulnerabilidad de seguridad ha sido detectada en itsourcecode Online Clinic Management System 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo transact.php. Tal manipulación del argumento firstname conduce a inyección SQL. El ataque puede ser lanzado de forma remota. El exploit ha… | |
| Analizada | Baja (2.1) | 0.40% | — | Razormist Online Polling System | 17/9/2025 | 25/9/2026 | Se ha identificado una debilidad en SourceCodester Online Polling System 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo /admin/positions.PHP. Esta manipulación del argumento ID causa inyección SQL. El ataque puede ser iniciado de forma remota. El exploit ha sido puesto a disposición… | |
| Analizada | Media (5.5) | 0.42% | — | Emiloi Online Discussion Forum | 17/9/2025 | 17/6/2026 | Se determinó una vulnerabilidad en PHPGurukul Online Discussion Forum 1.0. Afectada por este problema es alguna funcionalidad desconocida del archivo /admin/admin_forum/search_result.PHP. La ejecución de la manipulación del argumento Search puede conducir a inyección SQL. El ataque puede ser lanzado remotamente. El… | |
| Analizada | Media (5.5) | 0.42% | — | Emiloi Online Discussion Forum | 17/9/2025 | 25/9/2026 | Una vulnerabilidad fue identificada en PHPGurukul Online Discussion Forum 1.0. Esto afecta una parte desconocida del archivo /admin/edit_member.php. La manipulación del argumento ID conduce a inyección SQL. El ataque puede ser iniciado remotamente. El exploit está disponible públicamente y podría ser usado. |