|
241
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `e2pdf-download` shortcode in all versions up to, and includi…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-7650
|
2026-05-9 00:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
242
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parame…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8125
|
2026-05-9 00:45 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
243
|
7.3 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /login.php. This manipulation of the argument txt_username causes sql injection. T…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8132
|
2026-05-9 00:45 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
244
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulation of the argument submit-url l…
New
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-8137
|
2026-05-9 00:45 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
245
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulation of the argument p…
New
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-8117
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246
|
7.3 |
HIGH
Network
|
-
|
-
|
A flaw has been found in SourceCodester Comment System 1.0. This issue affects some unknown processing of the file post_comment.php. This manipulation of the argument Name causes sql injection. Remot…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8126
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the argument msgid result…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8128
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argument delwlistid can…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8129
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql injecti…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8130
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250
|
7.3 |
HIGH
Network
|
-
|
-
|
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql …
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-8131
|
2026-05-9 00:41 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
