Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior
Críticas / altas1313▼ 190 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior
212 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.3) | 0.50% | — | Angeljudesuarez Library Management System | 4/4/2025 | 17/6/2026 | A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Management/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may be launched remotely.… | |
| Analizada | Baja (3.8) | 0.29% | — | Angeljudesuarez Simple Chatbox | 21/2/2025 | 17/6/2026 | A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /del.php. The attack can use SQL injection to obtain sensitive data. | |
| Analizada | Baja (3.8) | 0.29% | — | Angeljudesuarez Simple Chatbox | 21/2/2025 | 17/6/2026 | A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data. | |
| Analizada | Alta (7.2) | 0.47% | — | Angeljudesuarez Simple Chatbox | 21/2/2025 | 17/6/2026 | A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data. | |
| Analizada | Media (6.4) | 0.38% | — | Angeljudesuarez Simple Chatbox | 21/2/2025 | 17/6/2026 | A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data. | |
| Modificada | Media (6.1) | 0.35% | — | Angeljudesuarez Placement Management System | 3/2/2025 | 17/6/2026 | itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php. | |
| Analizada | Media (5.3) | 0.49% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file staffview.php. The manipulation of the argument staffid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.3) | 0.47% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.3) | 0.43% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument incid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.3) | 0.43% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown functionality of the file expview.php. The manipulation of the argument expid leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.51% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file templatedelete.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to… | |
| Analizada | Media (5.3) | 0.51% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file typedelete.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (5.3) | 1.1% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file customerview.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.3) | 0.55% | — | Angeljudesuarez Tailoring Management System | 1/2/2025 | 17/6/2026 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file deldoc.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (5.3) | 0.54% | — | Angeljudesuarez Tailoring Management System | 30/1/2025 | 17/6/2026 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipulation of the argument id/address/fullname/phonenumber/email/city/comment leads to sql injection. The attack can be… | |
| Analizada | Media (5.3) | 0.54% | — | Angeljudesuarez Tailoring Management System | 30/1/2025 | 17/6/2026 | A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed… | |
| Analizada | Media (5.1) | 0.70% | — | Angeljudesuarez Tailoring Management System | 20/1/2025 | 17/6/2026 | A vulnerability classified as critical was found in itsourcecode Farm Management System up to 1.0. This vulnerability affects unknown code of the file /add-pig.php. The manipulation of the argument pigphoto leads to unrestricted upload. The attack can be initiated remotely. | |
| Analizada | Media (5.3) | 0.68% | — | Angeljudesuarez Farm Management System | 19/1/2025 | 17/6/2026 | A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-pig.php. The manipulation of the argument pigno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (5.3) | 0.55% | — | Angeljudesuarez Tailoring Management System | 17/1/2025 | 17/6/2026 | A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /expadd.php. The manipulation of the argument expcat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.3) | 0.54% | — | Angeljudesuarez Vehicle Management System | 19/12/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed… | |
| Analizada | Media (5.3) | 0.40% | — | Angeljudesuarez Vehicle Management System | 19/12/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed… | |
| Analizada | Media (5.3) | 0.68% | — | Angeljudesuarez Tailoring Management System | 23/11/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /expedit.php. The manipulation of the argument expcat leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.3) | 0.69% | — | Angeljudesuarez Tailoring Management System | 21/11/2024 | 17/6/2026 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /expcatedit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to… | |
| Modificada | Alta (7.2) | 0.74% | 💥 PoC | Angeljudesuarez Construction Management System | 13/11/2024 | 17/6/2026 | A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. | |
| Modificada | Alta (7.2) | 0.74% | 💥 PoC | Angeljudesuarez Construction Management System | 13/11/2024 | 17/6/2026 | A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. |