Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.1In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter.CVE-2025-65136 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 0.2%Apr 14, 2026
Medium6.1In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter.CVE-2025-65134 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 0.2%Apr 14, 2026
Critical9.8Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitem_name POST parameter.CVE-2025-63939 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 0.3%Apr 14, 2026
Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manage_user.php.CVE-2026-37602 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage_appointment.php.CVE-2026-37601 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view_details.php.CVE-2026-37600 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettings.php?f=update_settings.CVE-2026-37598 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/attendance_list.php.CVE-2026-37597 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_department.php.CVE-2026-37596 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.CVE-2026-37595 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php.CVE-2026-37594 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php.CVE-2026-37593 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.CVE-2026-37592 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.CVE-2026-37591 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.CVE-2026-37590 · CVE.org · NIST NVD · PHPApr 14, 2026
Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php.CVE-2026-37589 · CVE.org · NIST NVD · PHPApr 14, 2026
High8.8In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page.CVE-2025-51414 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 0.3%Apr 13, 2026
Low2.7Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php.CVE-2026-36952 · CVE.org · NIST NVD · PHPApr 13, 2026
Low2.7Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.CVE-2026-36950 · CVE.org · NIST NVD · PHPApr 13, 2026
High7.3Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php.CVE-2026-36948 · CVE.org · NIST NVD · PHPApr 13, 2026
Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.CVE-2026-36938 · CVE.org · NIST NVD · PHPApr 13, 2026
Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.CVE-2026-36937 · CVE.org · NIST NVD · PHPApr 13, 2026
Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.phpCVE-2026-36945 · CVE.org · NIST NVD · PHPApr 13, 2026
Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php.CVE-2026-36944 · CVE.org · NIST NVD · PHPApr 13, 2026
Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php.CVE-2026-36943 · CVE.org · NIST NVD · PHPApr 13, 2026