VYPR

Vendor CVEs

Angeljudesuarez

All CVEs

221 total · sorted by risk
  • CVE-2026-30707HigMar 17, 2026
    risk 0.53cvss 8.1epss 0.00

    An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full…

  • CVE-2026-4223HigMar 16, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly…

  • CVE-2026-3944HigMar 11, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /att_add.php. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly…

  • CVE-2026-3765HigMar 8, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available…

  • CVE-2026-3760HigMar 8, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The…

  • CVE-2026-3747HigMar 8, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit…

  • CVE-2026-3740HigMar 8, 2026
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the argument admin_search_student causes sql injection. The attack is possible to be carried out remotely.…

  • CVE-2026-3413HigMar 2, 2026
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /admin_single_student.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has…

  • CVE-2026-3411HigMar 2, 2026
    risk 0.47cvss 7.3epss 0.00

    A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the…

  • CVE-2026-3410HigMar 2, 2026
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/check_studid.php. Executing a manipulation of the argument student_id can lead to sql injection. The attack may be launched…

  • CVE-2026-3152HigFeb 25, 2026
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacher_id causes sql injection. It is possible to initiate the attack remotely. The exploit…

  • CVE-2026-3151HigFeb 25, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public…

  • CVE-2026-2117HigFeb 8, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. The attack can be initiated remotely. The…

  • CVE-2026-2116HigFeb 8, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/edit_expenses.php. Such manipulation of the argument expenses_id leads to sql injection. It is possible to launch the attack remotely. The exploit has…

  • CVE-2026-2115HigFeb 7, 2026
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the file /admin/delete_expenses.php. This manipulation of the argument expenses_id causes sql injection. It is possible to initiate the attack remotely. The exploit…

  • CVE-2026-2114HigFeb 7, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_admin.php. The manipulation of the argument admin_id results in sql injection. The attack may be performed from remote. The exploit is now…

  • CVE-2026-1595HigJan 29, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. The manipulation of the argument student_id results in sql injection. The attack can be executed remotely. The exploit is now…

  • CVE-2026-1594HigJan 29, 2026
    risk 0.47cvss 7.3epss 0.00

    A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_expenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack…

  • CVE-2026-1593HigJan 29, 2026
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_expenses_query.php. Executing a manipulation of the argument detail can lead to sql injection. The attack may be…

  • CVE-2026-1590HigJan 29, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly…

  • CVE-2026-1589HigJan 29, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been…

  • CVE-2026-1545HigJan 28, 2026
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has…

  • CVE-2026-1422HigJan 26, 2026
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is…

  • CVE-2026-1119HigJan 18, 2026
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/delete_activity.php. Executing a manipulation of the argument activity_id can lead to sql injection. It is possible to launch the attack remotely.…

  • CVE-2025-15354HigDec 30, 2025
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit…

  • CVE-2025-15353HigDec 30, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack…

  • CVE-2025-15168HigDec 29, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and…

  • CVE-2025-15078HigDec 25, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_report.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and…

  • CVE-2025-15077HigDec 25, 2025
    risk 0.47cvss 7.3epss 0.00

    A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been…

  • CVE-2025-15075HigDec 25, 2025
    risk 0.47cvss 7.3epss 0.00

    A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /student_p.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has…

  • CVE-2025-15034HigDec 23, 2025
    risk 0.47cvss 7.3epss 0.00

    A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public…

  • CVE-2025-14967HigDec 19, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidates_report.php. The manipulation of the argument school_year leads to sql injection. The attack can be initiated remotely.…

  • CVE-2025-14667HigDec 14, 2025
    risk 0.47cvss 7.3epss 0.00

    A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=system_info. Such manipulation of the argument meta_value leads to sql injection. The attack may be performed from remote.…

  • CVE-2025-14666HigDec 14, 2025
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in itsourcecode COVID Tracking System 1.0. The affected element is an unknown function of the file /admin/?page=user. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit…

  • CVE-2025-14661HigDec 14, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been…

  • CVE-2025-14653HigDec 14, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly…

  • CVE-2025-14644HigDec 14, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has…

  • CVE-2025-14639HigDec 14, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be…

  • CVE-2025-14588HigDec 13, 2025
    risk 0.47cvss 7.3epss 0.00

    A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The…

  • CVE-2025-14585HigDec 12, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been…

  • CVE-2025-14584HigDec 12, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The…

  • CVE-2025-14578HigDec 12, 2025
    risk 0.47cvss 7.3epss 0.00

    A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /update_account.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has…

  • CVE-2025-14337HigDec 9, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and…

  • CVE-2025-14336HigDec 9, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has…

  • CVE-2025-14335HigDec 9, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /new_school_year.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely.…

  • CVE-2025-14334HigDec 9, 2025
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_adviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and…

  • CVE-2025-14258HigDec 8, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newsubject.php. The manipulation of the argument sub leads to sql injection. The attack may be initiated remotely. The exploit…

  • CVE-2025-14257HigDec 8, 2025
    risk 0.47cvss 7.3epss 0.00

    A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newrecord.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be…

  • CVE-2025-14256HigDec 8, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was detected in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /newcurriculm.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and…

  • CVE-2025-14226HigDec 8, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is…

Page 1 of 5