Search vulnerabilities

Results 1,040

Export CSV
CVE-2026-37598

Arbitrary Code Execution via Unvalidated Settings Update in Patient Appointment Scheduler System

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettings.php?f=update_settings.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-3148

SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
CVE-2026-36938

SQL Injection Vulnerability in Sourcecodester Online Resort Management System

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-36941

SQL Injection Vulnerability in Sourcecodester Online Resort Management System

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-36942

SQL Injection Vulnerability in Sourcecodester Online Resort Management System

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-36937

SQL Injection in Sourcecodester Online Resort Management System Admin Reservations View

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2026-37337

SQL Injection via Unsanitized Parameter in view_playlist.php of Simple Music Cloud Community System v1.0

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_playlist.php.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors