Total
20142 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-37594 | 2026-06-17 | N/A | 2.7 LOW | ||
| SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php. | |||||
| CVE-2026-37593 | 2026-06-17 | N/A | 2.7 LOW | ||
| SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php. | |||||
| CVE-2026-37592 | 2026-06-17 | N/A | 2.7 LOW | ||
| Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php. | |||||
| CVE-2026-37591 | 2026-06-17 | N/A | 2.7 LOW | ||
| Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php. | |||||
| CVE-2026-37590 | 2026-06-17 | N/A | 2.7 LOW | ||
| SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php. | |||||
| CVE-2026-37589 | 2026-06-17 | N/A | 2.7 LOW | ||
| SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php. | |||||
| CVE-2026-37505 | 1 V2board | 1 V2board | 2026-06-17 | N/A | 4.9 MEDIUM |
| SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort parameter from user input is passed directly to User::orderBy($sort, $sortType) without validation. An authenticated admin can sort users by any database column including password, remember_token, and other sensitive fields, enabling information disclosure through ordering analysis. | |||||
| CVE-2026-37431 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement. | |||||
| CVE-2026-37429 | 2026-06-17 | N/A | 6.5 MEDIUM | ||
| qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysUserMapper.xml file. This vulnerability allows attackers to access sensitive database information, including users' Personally Identifiable Information (PII) via a crafted SQL statement. | |||||
| CVE-2026-37428 | 2026-06-17 | N/A | 6.5 MEDIUM | ||
| qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. This vulnerability allows attackers to access sensitive database information, including users' Personally Identifiable Information (PII). | |||||
| CVE-2026-37347 | 2026-06-17 | N/A | 9.1 CRITICAL | ||
| SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php. | |||||
| CVE-2026-37346 | 2026-06-17 | N/A | 4.7 MEDIUM | ||
| SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=. | |||||
| CVE-2026-37345 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php. | |||||
| CVE-2026-37344 | 2026-06-17 | N/A | 7.2 HIGH | ||
| SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php. | |||||
| CVE-2026-37343 | 2026-06-17 | N/A | 7.2 HIGH | ||
| SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_user.php. | |||||
| CVE-2026-37342 | 2026-06-17 | N/A | 7.2 HIGH | ||
| SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php. | |||||
| CVE-2026-37341 | 2026-06-17 | N/A | 7.2 HIGH | ||
| SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php. | |||||
| CVE-2026-37340 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php. | |||||
| CVE-2026-37339 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php. | |||||
| CVE-2026-37338 | 2026-06-17 | N/A | 9.4 CRITICAL | ||
| SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php. | |||||