Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3007▼ 68 respecto a la semana anterior
Críticas / altas1421▲ 55 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.5) | 0.53% | — | Code-projects Vehicle Management SystemAI | 4/9/2026 | 8/9/2026 | A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The exploit… | |
| Aplazada | Media (5.5) | 0.43% | — | Code-projects Vehicle Management SystemAI | 4/9/2026 | 11/9/2026 | A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. | |
| Aplazada | Media (5.5) | 0.37% | — | Code-projects Vehicle Management SystemAI | 5/6/2026 | 17/6/2026 | A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Media (5.5) | 0.57% | — | Admerc Vehicle Management System | 21/2/2026 | 17/6/2026 | A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. | |
| Analizada | Media (5.5) | 0.44% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /filter.php. The manipulation of the argument from leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.55% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /filter1.php. The manipulation of the argument vehicle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (5.5) | 0.44% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue affects some unknown processing of the file /filter2.php. The manipulation of the argument from leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Analizada | Media (5.5) | 0.54% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability classified as critical has been found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /updatebal.php. The manipulation of the argument company leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may… | |
| Analizada | Media (5.5) | 0.55% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability was found in code-projects Vehicle Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addvehicle.php. The manipulation of the argument vehicle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.5) | 0.44% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability was found in code-projects Vehicle Management 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /addcompany.php. The manipulation of the argument company leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.5) | 0.41% | — | Code-projects Vehicle Management | 31/7/2025 | 17/6/2026 | A vulnerability was found in code-projects Vehicle Management 1.0. It has been classified as critical. This affects an unknown part of the file /print.php. The manipulation of the argument sno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may… | |
| Analizada | Media (5.5) | 0.52% | — | Code-projects Vehicle Management | 30/7/2025 | 17/6/2026 | A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit1.php. The manipulation of the argument sno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be… | |
| Analizada | Media (5.5) | 0.68% | — | Code-projects Vehicle Management | 30/7/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /filter3.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (5.1) | 0.47% | — | Janobe Vehicle Management System | 17/3/2025 | 17/6/2026 | A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /confirmbooking.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (5.4) | 0.43% | — | Janobe Vehicle Management System | 5/3/2025 | 17/6/2026 | Vehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the "Name" parameter of /vehicle-management/booking.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Janobe Vehicle Management System | 7/1/2025 | 5/7/2026 | Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which are present in… | |
| Analizada | Media (5.3) | 0.54% | — | Angeljudesuarez Vehicle Management System | 19/12/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed… | |
| Analizada | Media (5.3) | 0.58% | — | Admerc Vehicle Management System | 19/12/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editbill.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public… | |
| Analizada | Media (5.3) | 0.40% | — | Angeljudesuarez Vehicle Management System | 19/12/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed… | |
| Analizada | Media (6.9) | 0.70% | — | Vehicle Management Project Vehicle Management | 22/9/2024 | 17/6/2026 | A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /edit1.php. The manipulation of the argument sno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be… | |
| Analizada | Media (5.3) | 0.54% | — | Admerc Vehicle Management System | 14/8/2024 | 17/6/2026 | A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file mybill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the… | |
| Analizada | Media (6.9) | 0.74% | — | Admerc Vehicle Management System | 21/6/2024 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affected by this issue is some unknown functionality of the file busprofile.php. The manipulation of the argument busid leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Modificada | Media (6.9) | 0.53% | — | Itsourcecode Vehicle Management System Project IN PHP AND Mysql With Source Code | 20/6/2024 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The exploit has been… | |
| Modificada | Media (6.9) | 0.60% | — | Warrendaloyan Vehicle Management System | 9/6/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatebill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the… | |
| Analizada | Media (6.9) | 0.94% | — | Warrendaloyan Vehicle Management System | 26/5/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to… |