Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.Apr 13, 2026
- Low2.7Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.Apr 13, 2026
- Low2.7Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.Apr 13, 2026
- Low2.7Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.Apr 13, 2026
- Low2.7Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.Apr 13, 2026
- High8.8Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries.EPSS 0.3%Apr 12, 2026
- Critical9.3A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint (/api/tel/zadarma.php).Apr 11, 2026
- Low3.7phpseclib is a PHP secure communications library.Apr 10, 2026
- Critical9.8SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.Apr 10, 2026
- Critical9.8A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0.Apr 10, 2026
- Critical9.8itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.Apr 10, 2026
- Critical9.8A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0.Apr 10, 2026
- Critical9.8A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0.Apr 10, 2026
- Critical9.8PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php.Apr 10, 2026
- Low2.1A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php.Apr 10, 2026
- High8.8An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server.EPSS 0.3%Apr 9, 2026
- Medium5.4Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.Apr 7, 2026
- Medium5.4Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.Apr 7, 2026
- High8.8Genealogy is a family tree PHP application.Apr 7, 2026