|
1031
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the file /airag/word/edit. Executing a manipulation can lead to server-side request …
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-10239
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1032
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was identified in JeecgBoot up to 3.9.2. The impacted element is an unknown function of the file /airag/airagModel/test. The manipulation of the argument baseUrl leads to server-side …
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-10240
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1033
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1. This affects the function FileDownloadUtils.download2DiskFromNet of the file /airag/app/debug of the comp…
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-10241
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1034
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topic_id causes sql inj…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-10242
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1035
|
7.3 |
HIGH
Network
|
-
|
-
|
A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authenticatio…
New
|
CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
|
CVE-2026-10243
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1036
|
7.3 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in itsourcecode Online House Rental System 1.0. The impacted element is an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-10251
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1037
|
7.3 |
HIGH
Network
|
-
|
-
|
A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown function of the file /manage_tenant.php. The manipulation of the argument ID leads t…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-10252
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1038
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the file /manage_payment.php. The manipulation of the argument ID results in sql injec…
New
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-10253
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1039
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. Th…
New
|
CWE-200
CWE-538
Information Exposure
File and Directory Information Exposure
|
CVE-2026-10254
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1040
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function sell_statement of the file application/controllers/ShowForm.ph…
New
|
CWE-266
CWE-284
Incorrect Privilege Assignment
Improper Access Control
|
CVE-2026-10255
|
2026-06-2 00:15 |
2026-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
