CVE-2026-37149
pateldhyeyit/cve-2026-37149CVE-2026-37149 - SQL Injection vulnerability in the scost parameter of search_products.php in…
database-securityeducationinformation-gathering+3
2
pateldhyeyit/cve-2026-37149CVE-2026-37149 - SQL Injection vulnerability in the scost parameter of search_products.php in…
amaansiddd787/cve-2025-65354Technical disclosure and proof-of-concept for SQL injection in PuneethReddyHC event-management v1.0, detailing affected endpoint, payloads, and…
maherazzouzi/cve-2022-36163Proof-of-concept exploit for CVE-2022-36163, a format string vulnerability in pdftoroff hovacui 1.1.0 PDF reader, demonstrating local…
erengozaydin/microfinance-management-system-v1.0-sql-injection-vulnerability-unauthenticatedProof-of-concept exploit for an unauthenticated SQL injection vulnerability in Microfinance Management System V1.0, allowing remote data extraction…
tuannq2299/cve-2023-23279Proof-of-concept exploit for an unauthenticated SQL injection vulnerability (CVSS 9.8) in Canteen Management System v1.0, enabling remote data…
geraldoalcantara/cve-2023-49989Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "id" parameter at update.php
bypazs/cve-2022-42098KLiK-SocialMediaWebsite v1.0.1 has SQL Injection Vulnerabilities at profile.php
vighneshnair7/cve-2024-48427Proof-of-concept for CVE-2024-48427: SQL injection in Sourcecodester Packers and Movers Management System v1.0. Exploits the id parameter to execute…
geraldoalcantara/cve-2023-51801Simple Student Attendance System v.1.0 - Multiple SQL injection vulnerabilities - student_form.php and class_form.php
baroi-ai/cve-2024-42658CVE-2024-42658 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookies…
baroi-ai/cve-2024-42657CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of…
hh1f/cve-2022-27413Proof-of-concept exploit for CVE-2022-27413, an SQL injection vulnerability in Hospital-Management-System v1.0 admin.php page. Includes payloads and…
ersinerenler/cve-2023-46022-code-projects-blood-bank-1.0-oob-sql-injection-vulnerabilityProof-of-concept exploit for CVE-2023-46022, demonstrating Out-of-Band SQL injection in Code-Projects Blood Bank V1.0 via the 'bid' parameter,…
geraldoalcantara/cve-2023-49979Best Student Management System v1.0 - Incorrect Access Control - Directory Listing
maikroservice/cve-2022-3942Proof-of-concept for CVE-2022-3942: stored XSS in Sanitization Management System v1.0 enabling cookie theft via crafted payload in Remarks/Address…
randomrobbiebf/cve-2024-12404CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
ersinerenler/cve-2023-46020-code-projects-blood-bank-1.0-stored-cross-site-scripting-vulnerabilityProof-of-concept exploit for stored cross-site scripting (XSS) vulnerability in Code-Projects Blood Bank V1.0 via unsanitized profile parameters,…
ersinerenler/cve-2023-46017-code-projects-blood-bank-1.0-sql-injection-vulnerabilityProof-of-concept exploit for SQL injection in Code-Projects Blood Bank V1.0. Demonstrates authentication bypass and database extraction via…