Vulnerabilities

TI-2026-04377 CVE-2026-5019 · GHSA-2m22-876p-4x3q

code-projects Simple Food Order System Parameter all-orders.php sql injection

HIGH 70

A security vulnerability has been detected in code-projects Simple Food Order System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00457 Published 2026-03-28 No fix listed CWE-74

TI-2026-04376 CVE-2026-5018 · GHSA-fxmv-6cv3-5qrj

code-projects Simple Food Order System Parameter register-router.php sql injection

HIGH 70

A weakness has been identified in code-projects Simple Food Order System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00351 Published 2026-03-28 No fix listed CWE-74

TI-2026-04375 CVE-2026-5017 · GHSA-jc2v-rvhq-xq4w

code-projects Simple Food Order System Parameter all-tickets.php sql injection

HIGH 70

A security flaw has been discovered in code-projects Simple Food Order System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00339 Published 2026-03-28 No fix listed CWE-74

TI-2026-03938 CVE-2026-4533 · GHSA-4cp8-2mwh-cqwg

code-projects Simple Food Ordering System all-tickets.php sql injection

MEDIUM 57

A vulnerability was detected in code-projects Simple Food Ordering System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00307 Published 2026-03-22 No fix listed CWE-74

TI-2026-03937 CVE-2026-4532 · GHSA-mcqg-vw6x-qfjx

code-projects Simple Food Ordering System Database Backup food.sql file access

HIGH 70

A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00461 Published 2026-03-22 No fix listed CWE-425

TI-2026-03759 CVE-2026-4319 · GHSA-wmcq-8969-56c5

code-projects Simple Food Order System add-item.php sql injection

HIGH 70

A vulnerability was identified in code-projects Simple Food Order System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00346 Published 2026-03-17 No fix listed CWE-74

TI-2026-03253 CVE-2026-3763 · GHSA-h6h8-r6j7-hhxp

code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting

MEDIUM 57

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00356 Published 2026-03-08 No fix listed CWE-79

TI-2026-03235 CVE-2026-3745 · GHSA-xr29-4f97-vhvq

code-projects Student Web Portal profile.php sql injection

MEDIUM 57

A vulnerability was found in code-projects Student Web Portal 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00344 Published 2026-03-08 No fix listed CWE-74

TI-2026-03234 CVE-2026-3744 · GHSA-pxcf-6j8x-3v58

code-projects Student Web Portal signup.php valreg_passwdation sql injection

MEDIUM 64

A vulnerability has been found in code-projects Student Web Portal 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00446 Published 2026-03-08 No fix listed CWE-74

TI-2026-03226 CVE-2026-3736 · GHSA-jrr9-9f8v-x4vc

code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection

HIGH 70

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00392 Published 2026-03-08 No fix listed CWE-74

TI-2026-03225 CVE-2026-3735 · GHSA-qqp5-j8mq-9px7

code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection

MEDIUM 64

A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00392 Published 2026-03-08 No fix listed CWE-74

TI-2026-03213 CVE-2026-3723 · GHSA-j8xf-qr43-j3qr

code-projects Simple Flight Ticket Booking System Admindelete.php sql injection

MEDIUM 64

A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-03-08 No fix listed CWE-74

TI-2026-03203 CVE-2026-3711 · GHSA-52w5-q3hg-34x8

code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection

MEDIUM 56

A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00314 Published 2026-03-08 No fix listed CWE-74

TI-2026-03202 CVE-2026-3710 · GHSA-9p2q-g4qr-25v6

code-projects Simple Flight Ticket Booking System Adminadd.php sql injection

MEDIUM 56

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00314 Published 2026-03-08 No fix listed CWE-74

TI-2026-03201 CVE-2026-3709 · GHSA-fjh9-gh6f-c72j

code-projects Simple Flight Ticket Booking System register.php sql injection

HIGH 70

A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00406 Published 2026-03-08 No fix listed CWE-74

TI-2026-03200 CVE-2026-3708 · GHSA-vfcc-w7fg-428q

code-projects Simple Flight Ticket Booking System login.php sql injection

HIGH 70

A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-03-08 No fix listed CWE-74

TI-2026-03197 CVE-2026-3705 · GHSA-5q8f-ww77-376j

code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection

HIGH 70

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00406 Published 2026-03-08 No fix listed CWE-74

TI-2026-21364 CVE-2026-26713 · GHSA-xmhp-8xwp-jvgw

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.

MEDIUM 49

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00383 Published 2026-03-02 No fix listed CWE-89

TI-2026-21363 CVE-2026-26712 · GHSA-cxqf-7r7v-frpf

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.

MEDIUM 49

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0037 Published 2026-03-02 No fix listed CWE-89

TI-2026-21362 CVE-2026-26711 · GHSA-xgmq-mgc9-gwfc

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php.

MEDIUM 49

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0037 Published 2026-03-02 No fix listed CWE-89

TI-2026-21361 CVE-2026-26710 · GHSA-rcr6-97cm-55vg

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php.

MEDIUM 49

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00383 Published 2026-03-02 No fix listed CWE-89

TI-2026-21360 CVE-2026-26709 · GHSA-3whr-wp9q-7v74

code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.

HIGH 82

code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0037 Published 2026-03-02 No fix listed CWE-89

TI-2026-21349 CVE-2026-26698 · GHSA-mr9c-hj68-jf33

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.

LOW 22

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00321 Published 2026-03-02 No fix listed CWE-89

TI-2026-21348 CVE-2026-26697 · GHSA-w5v2-q9m2-wvfm

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in…

LOW 22

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00321 Published 2026-03-02 No fix listed CWE-89

TI-2026-21347 CVE-2026-26696 · GHSA-g9vg-6vhw-c5jf

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.

MEDIUM 50

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00565 Published 2026-03-02 No fix listed CWE-89

Vulnerabilities

Filters