Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2766▲ 12 respecto a la semana anterior
Críticas / altas1276▼ 252 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)245▲ 227 respecto a la semana anterior
5381 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.5) | 0.53% | — | Angeljudesuarez Sports Management System | 1/9/2025 | 25/9/2026 | Se determinó una vulnerabilidad en itsourcecode Sports Management System 1.0. Esto afecta una función desconocida del archivo /Admin/sporttype.php. La manipulación del argumento 'code' puede llevar a una inyección SQL. El ataque puede ejecutarse remotamente. El exploit se ha divulgado públicamente y puede ser… | |
| Analizada | Media (5.5) | 0.60% | — | Angeljudesuarez Sports Management System | 1/9/2025 | 25/9/2026 | Se encontró una vulnerabilidad en itsourcecode Sports Management System 1.0. El elemento afectado es una función desconocida del archivo /Admin/facilitator.PHP. Realizar la manipulación del argumento 'code' resulta en inyección SQL. La explotación remota del ataque es posible. El exploit se ha hecho público y podría… | |
| Analizada | Media (5.5) | 0.41% | — | Campcodes Courier Management System | 1/9/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to… | |
| Analizada | Baja (2.1) | 0.40% | — | Deepakmisal24 Chemical Inventory Management System | 1/9/2025 | 17/6/2026 | A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory_form.php. Such manipulation of the argument chem_name leads to sql injection. The attack may be performed from remote. The exploit is… | |
| Analizada | Media (5.5) | 0.42% | — | Angeljudesuarez Sports Management System | 1/9/2025 | 25/9/2026 | Una vulnerabilidad ha sido encontrada en itsourcecode Sports Management System 1.0. El elemento afectado es una función desconocida del archivo /Admin/tournament_details.php. Dicha manipulación del argumento ID conduce a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y… | |
| Analizada | Media (5.5) | 0.45% | — | Campcodes Courier Management System | 1/9/2025 | 17/6/2026 | A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. | |
| Analizada | Baja (2.1) | 0.34% | — | Phpgurukul User Management System | 1/9/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. | |
| Analizada | Baja (2) | 0.29% | — | Campcodes Online Hospital Management System | 1/9/2025 | 17/6/2026 | A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has… | |
| Analizada | Baja (1.9) | 0.29% | — | Campcodes Online Hospital Management System | 1/9/2025 | 17/6/2026 | A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site scripting. The attack may be… | |
| Analizada | Baja (2.1) | 0.39% | — | Khanakag-17 Library Management System | 1/9/2025 | 30/9/2026 | Una vulnerabilidad ha sido encontrada en el Sistema de Gestión de Biblioteca Khanakag-17 hasta 60ed174506094dcd166e34904a54288e5d10ff24. Esto afecta a una función desconocida del archivo /index.php. La manipulación del argumento msg conduce a cross site scripting. La explotación remota del ataque es posible. El… | |
| Analizada | Media (5.5) | 0.41% | — | Campcodes Online Learning Management System | 1/9/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be… | |
| Analizada | Media (5.5) | 0.41% | — | Campcodes Online Learning Management System | 31/8/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and… | |
| Analizada | Baja (1.9) | 0.25% | — | Campcodes Hospital Management System | 31/8/2025 | 17/6/2026 | A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public… | |
| Analizada | Media (5.5) | 1.8% | 💥 Exploit | Campcodes Online Loan Management System | 31/8/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the… | |
| Analizada | Media (5.5) | 0.41% | — | Admerc Apartment Management System | 31/8/2025 | 17/6/2026 | A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument user_id results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. | |
| Analizada | Media (5.5) | 0.41% | — | Campcodes Farm Management System | 31/8/2025 | 17/6/2026 | A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be… | |
| Analizada | Baja (2.1) | 0.33% | — | Donbermoy Advanced School Management System | 30/8/2025 | 17/6/2026 | A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. | |
| Analizada | Baja (2.1) | 0.34% | — | Donbermoy Advanced School Management System | 30/8/2025 | 17/6/2026 | A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be… | |
| Analizada | Media (5.5) | 0.42% | — | Campcodes Online Loan Management System | 29/8/2025 | 17/6/2026 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_borrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the… | |
| Analizada | Baja (2.1) | 0.35% | — | Phpgurukul Directory Management System | 29/8/2025 | 17/6/2026 | A security vulnerability has been detected in PHPGurukul Directory Management System 2.0. This vulnerability affects unknown code of the file /admin/add-directory.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly… | |
| Analizada | Media (5.5) | 0.42% | — | Admerc Apartment Management System | 29/8/2025 | 17/6/2026 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manipulation of the argument mid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. | |
| Analizada | Media (5.5) | 0.40% | — | Admerc Apartment Management System | 29/8/2025 | 17/6/2026 | A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/bill_setup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.42% | — | Admerc Apartment Management System | 29/8/2025 | 17/6/2026 | A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utility_bill_setup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack remotely. The exploit has… | |
| Analizada | Media (5.5) | 0.42% | — | Admerc Apartment Management System | 29/8/2025 | 17/6/2026 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. | |
| Analizada | Media (5.5) | 0.42% | — | Admerc Apartment Management System | 29/8/2025 | 17/6/2026 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. The exploit has been… |