|
651
|
6.1 |
MEDIUM
Network
|
-
|
-
|
In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2025-65136
|
2026-04-18 00:33 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
652
|
9.9 |
CRITICAL
Network
|
-
|
-
|
An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to execute arbitrary code via uploading a crafted PHP file.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2026-38526
|
2026-04-18 00:33 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
653
|
8.5 |
HIGH
Network
|
-
|
-
|
A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a crafted POST request.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-38527
|
2026-04-18 00:33 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
654
|
7.1 |
HIGH
Network
|
-
|
-
|
Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.
|
CWE-89
SQL Injection
|
CVE-2026-38528
|
2026-04-18 00:33 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
655
|
2.7 |
LOW
Network
|
-
|
-
|
SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.
|
CWE-89
SQL Injection
|
CVE-2026-37590
|
2026-04-18 00:32 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
656
|
2.7 |
LOW
Network
|
-
|
-
|
Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.
|
CWE-89
SQL Injection
|
CVE-2026-37591
|
2026-04-18 00:32 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
657
|
2.7 |
LOW
Network
|
-
|
-
|
Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.
|
CWE-89
SQL Injection
|
CVE-2026-37592
|
2026-04-18 00:32 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
658
|
2.7 |
LOW
Network
|
-
|
-
|
SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php.
|
CWE-89
SQL Injection
|
CVE-2026-37593
|
2026-04-18 00:32 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
659
|
2.7 |
LOW
Network
|
-
|
-
|
SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php.
|
CWE-89
SQL Injection
|
CVE-2026-37594
|
2026-04-18 00:32 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
660
|
2.7 |
LOW
Network
|
-
|
-
|
SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.
|
CWE-89
SQL Injection
|
CVE-2026-37595
|
2026-04-18 00:32 |
2026-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
