Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2766▲ 12 respecto a la semana anterior
Críticas / altas1276▼ 252 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 1 respecto a la semana anterior
Sin puntuar (sin CVSS)245▲ 227 respecto a la semana anterior
–

5381 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (5.5)0.53%—Angeljudesuarez Sports Management System1/9/202525/9/2026
Se determinó una vulnerabilidad en itsourcecode Sports Management System 1.0. Esto afecta una función desconocida del archivo /Admin/sporttype.php. La manipulación del argumento 'code' puede llevar a una inyección SQL. El ataque puede ejecutarse remotamente. El exploit se ha divulgado públicamente y puede ser…
AnalizadaMedia (5.5)0.60%—Angeljudesuarez Sports Management System1/9/202525/9/2026
Se encontró una vulnerabilidad en itsourcecode Sports Management System 1.0. El elemento afectado es una función desconocida del archivo /Admin/facilitator.PHP. Realizar la manipulación del argumento 'code' resulta en inyección SQL. La explotación remota del ataque es posible. El exploit se ha hecho público y podría…
AnalizadaMedia (5.5)0.41%—Campcodes Courier Management System1/9/202517/6/2026
A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to…
AnalizadaBaja (2.1)0.40%—Deepakmisal24 Chemical Inventory Management System1/9/202517/6/2026
A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory_form.php. Such manipulation of the argument chem_name leads to sql injection. The attack may be performed from remote. The exploit is…
AnalizadaMedia (5.5)0.42%—Angeljudesuarez Sports Management System1/9/202525/9/2026
Una vulnerabilidad ha sido encontrada en itsourcecode Sports Management System 1.0. El elemento afectado es una función desconocida del archivo /Admin/tournament_details.php. Dicha manipulación del argumento ID conduce a inyección SQL. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y…
AnalizadaMedia (5.5)0.45%—Campcodes Courier Management System1/9/202517/6/2026
A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
AnalizadaBaja (2.1)0.34%—Phpgurukul User Management System1/9/202517/6/2026
A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
AnalizadaBaja (2)0.29%—Campcodes Online Hospital Management System1/9/202517/6/2026
A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has…
AnalizadaBaja (1.9)0.29%—Campcodes Online Hospital Management System1/9/202517/6/2026
A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site scripting. The attack may be…
AnalizadaBaja (2.1)0.39%—Khanakag-17 Library Management System1/9/202530/9/2026
Una vulnerabilidad ha sido encontrada en el Sistema de Gestión de Biblioteca Khanakag-17 hasta 60ed174506094dcd166e34904a54288e5d10ff24. Esto afecta a una función desconocida del archivo /index.php. La manipulación del argumento msg conduce a cross site scripting. La explotación remota del ataque es posible. El…
AnalizadaMedia (5.5)0.41%—Campcodes Online Learning Management System1/9/202517/6/2026
A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be…
AnalizadaMedia (5.5)0.41%—Campcodes Online Learning Management System31/8/202517/6/2026
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and…
AnalizadaBaja (1.9)0.25%—Campcodes Hospital Management System31/8/202517/6/2026
A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public…
AnalizadaMedia (5.5)1.8%💥 ExploitCampcodes Online Loan Management System31/8/202517/6/2026
A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the…
AnalizadaMedia (5.5)0.41%—Admerc Apartment Management System31/8/202517/6/2026
A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument user_id results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
AnalizadaMedia (5.5)0.41%—Campcodes Farm Management System31/8/202517/6/2026
A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php. The manipulation of the argument pid results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be…
AnalizadaBaja (2.1)0.33%—Donbermoy Advanced School Management System30/8/202517/6/2026
A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
AnalizadaBaja (2.1)0.34%—Donbermoy Advanced School Management System30/8/202517/6/2026
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be…
AnalizadaMedia (5.5)0.42%—Campcodes Online Loan Management System29/8/202517/6/2026
A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_borrower. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the…
AnalizadaBaja (2.1)0.35%—Phpgurukul Directory Management System29/8/202517/6/2026
A security vulnerability has been detected in PHPGurukul Directory Management System 2.0. This vulnerability affects unknown code of the file /admin/add-directory.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly…
AnalizadaMedia (5.5)0.42%—Admerc Apartment Management System29/8/202517/6/2026
A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manipulation of the argument mid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
AnalizadaMedia (5.5)0.40%—Admerc Apartment Management System29/8/202517/6/2026
A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/bill_setup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The exploit has been…
AnalizadaMedia (5.5)0.42%—Admerc Apartment Management System29/8/202517/6/2026
A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utility_bill_setup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack remotely. The exploit has…
AnalizadaMedia (5.5)0.42%—Admerc Apartment Management System29/8/202517/6/2026
A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
AnalizadaMedia (5.5)0.42%—Admerc Apartment Management System29/8/202517/6/2026
A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. The exploit has been…