OS command injection in Langflow's MCP stdio transport allows an attacker who can reach the MCP server configuration endpoint (POST/PATCH /api/v2/mcp/servers/{server_name}) or add an MCP Tools component to a flow to execute arbitrary operating-system commands on the Langflow host, running with the privileges of the Langflow process user. The vulnerability affects Langflow before 1.10.3, langflow-base before 0.10.3, and lfx before 1.10.3, and is reachable without any account on an exposed instance left in its default LANGFLOW_AUTO_LOGIN=true configuration because GET /api/v1/auto_login issues a token without credentials; when AUTO_LOGIN is disabled, any authenticated non-admin user is sufficient (CVSS vector PR:L), so no administrative role is required. The command fires automatically as soon as Langflow tries to connect to the configured server (listing servers, loading tools, or running a flow), and the resulting execution is not confined to the Langflow process security context per the S:C scope metric. No public exploit code was identified at time of analysis, and vendor-released fixes are available in Langflow 1.10.3, langflow-base 0.10.3, and lfx 1.10.3.
Stack-based buffer overflow in the TOTOLINK A3002MU router's QoS Rule Handler allows remote attackers to corrupt memory on the device by supplying oversized addQos, comment, or entry_name arguments to /boafrm/formIpQoS, with high confidentiality, integrity, and availability impact. Only firmware 1.0.0-B20230403.1455 is identified as affected, and publicly available exploit code exists (a published proof-of-concept gist), so anyone who can reach the management interface can attempt it. The published CVSS 4.0 vector scores 9.3 as network-reachable, low-complexity, and unauthenticated (PR:N/UI:N); note however that TOTOLINK /boafrm/ handlers commonly require an authenticated web session, so the realistic risk is concentrated where the admin interface is exposed to the WAN or reachable from an untrusted LAN segment.
Improper authorization in the boa web server on TOTOLINK A3002MU firmware 1.0.0-B20230403.1455 lets remote, unauthenticated attackers reach protected administrative functionality without a valid session, giving them full control over the device's web management interface (high confidentiality, integrity and availability impact). Publicly available exploit code exists against the authentication-check function sub_40FCFC in /bin/boa, so weaponisation effort is low, although no CISA KEV listing or other confirmation of active exploitation was present in the available intelligence at time of analysis. Exposure is the practical limiter: units with WAN-side management enabled are directly internet-exploitable, whereas units whose admin interface is LAN-only require an on-network attacker or a LAN-side pivot.
Papermerge 3.5.3 permits an authenticated standard user to achieve remote code execution by uploading a crafted file to /api/documents/upload with directory-traversal sequences in the filename, causing a malicious Python .pth file to be written into the interpreter's site-packages directory; the embedded code executes only when the Python interpreter next starts, for example on an application or worker restart. Publicly available exploit code exists via a GitHub PoC repository and accompanying PDF, and the flaw is conditionally gated by requiring the Papermerge process to have write access to site-packages and by the attacker not controlling restart timing, making it a credible but conditionally-gated RCE rather than an immediately triggerable one.
Local file disclosure in Docling allows crafted HTML to embed readable files from the host filesystem into the rendered page image. When an application explicitly sets HTMLBackendOptions(render_page=True), has the optional Playwright dependency installed, and passes untrusted HTML as a filesystem Path, the HTML backend's browser request filter fails to enforce the enable_local_fetch setting or confine file:// access to the source document's directory, so an <iframe src="file:///..."> can pull in .env files, credentials, or other users' documents that Chromium then renders visibly into the output image. Publicly available exploit code exists and the issue is fixed in 2.118.1; EPSS is low (0.30%, 21st percentile) and there is no indication of active exploitation, so real-world priority is comparatively low despite the 7.5 CVSS, because exploitation demands a specific non-default configuration and disclosure is passive, read-only, and limited to text content Chromium renders in the viewport.
Multimodal inference requests to vLLM deployments running versions prior to 0.28.0 can trigger a process-level assertion failure that takes down the shared serving engine, denying service to all concurrent users. The flaw is a state desynchronization in the default mirrored multimodal LRU cache: a media hash can be committed in the frontend MultiModalProcessorSenderCache during rendering before engine admission, but if the request is rejected, the engine-side MultiModalReceiverCache never stores the corresponding payload, so any later request reusing that hash reaches an assertion reading "Expected a cached item." Exploitation requires only the ability to submit requests to the service (PR:L, network-reachable, no user interaction), is confined to deployments serving multimodal models, and results in availability impact only; no public exploit code was identified at time of analysis and upgrading to 0.28.0 removes the issue.
Unauthenticated network attackers can gain the highest application privileges on Perforce P4 Search container images prior to 2026.4.2 because the service authentication token is reset to a publicly documented default value (CWE-1392). Successful exploitation can lead to arbitrary code execution and compromise of any connected P4 Server, but full impact requires that the P4 Search container be network-reachable and that a P4 Server be connected to it. No public exploit identified at time of analysis, yet this is a genuine top-priority vulnerability because the default-token flaw is trivial to exploit once the service is exposed and the potential scope change to the connected P4 Server is severe.
Authenticated users of Langflow versions prior to 1.9.0 can achieve remote code execution on the underlying host by adding an MCP server that uses the Stdio transport, because the user-supplied command field is passed directly to a shell with no validation, allowlisting, or sandboxing; the injected command executes immediately when the MCP server list is fetched, requiring no further victim interaction, and the env field additionally permits environment-variable injection (for example LD_PRELOAD or PATH overrides) for a second code-execution path. The vendor has issued a fix in 1.9.0 that restricts MCP stdio commands to an allowlist and blocks dangerous environment variables, and no public exploit code has been identified at time of analysis. The 9.9 CVSS score reflects the vector's scope change (S:C) and high confidentiality, integrity, and availability impact, though practical exploitability depends on the attacker holding a valid authenticated Langflow account with access to MCP server configuration.
Authenticated command injection in the Penpot SVG exporter prior to 2.18.0 allows a user with edit rights on a design file to place shell metacharacters in a text object's fill-color value, which the exporter interpolates unsanitized into a ppmcolormask command string and runs via child_process.exec, resulting in arbitrary command execution with the exporter service's privileges. The CVSS 3.1 score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) reflects a scope change that crosses from the Penpot application into the underlying exporter host, with high confidentiality, integrity, and availability impact there. A second reachability path exists through a valid public share link to a malicious file, which lets anyone holding the link trigger the export without being an authenticated editor; no public exploit code has been identified at time of analysis, and the issue is fixed in 2.18.0.
Authenticated users who can create a workspace in Plane can force the application's background worker to fetch internal-only resources - including cloud instance metadata endpoints - by registering a webhook whose URL points at an attacker-controlled public host that returns a 302 redirect to a private, loopback, or link-local address. Because the pre-1.4.0 webhook delivery task calls requests.post() without disabling redirects and only validates the originally submitted URL, the fetched response body is written into webhook_logs and can be read back through the workspace webhook-logs API, turning the SSRF into a practical internal-data exfiltration channel. All Plane versions prior to 1.4.0 are affected; the issue is fixed in 1.4.0, no public exploit code has been identified at time of analysis, and exploitation requires authentication plus workspace-creation privileges rather than being anonymous.
Unauthenticated remote attackers can forge Django-signed session cookies, CSRF tokens, and password-reset tokens, and bypass live-service authentication, against Plane installations that shipped with publicly known default secrets. Plane versions prior to 1.4.0 distributed fixed SECRET_KEY (60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5) and LIVE_SERVER_SECRET_KEY (htbqvBJAgpm9bzvf3r4urJer0ENReatceh) values in the deployments/aio/community/ and deployments/cli/community/ manifests, while the top-level setup.sh randomized secrets only for the development Docker Compose path, leaving AIO and CLI community deployments with shared production secrets by default. Rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N, C/I/A:H) and classified CWE-798; no public exploit identified at time of analysis, although the default key values are published in the vendor repository and are therefore trivially usable by anyone who reads it. Exposure is limited to network-reachable instances deployed via those community manifests whose operators never overrode the secrets; deployments created through the development Compose path, operator-hardened installs with unique secrets, and instances upgraded to 1.4.0 are not exploitable.
Workspace invitation hijacking in Plane prior to 1.4.0 lets an unauthenticated attacker take over a pending workspace invitation by registering an account with a victim's email address. Because the signup flow creates a logged-in User row for any submitted address without an out-of-band ownership check and User.email is unique, the attacker can call GET /api/users/me/workspaces/invitations/ to enumerate invites matching that address, read the acceptance token exposed by WorkSpaceMemberInviteSerializer (fields = "all"), and then accept the invitation - joining the target workspace at the invited role. CVSS 3.1 scores this 9.8 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H); no public exploit code or CISA KEV entry was identified at time of analysis, and exploitation depends on a live pending invitation plus an instance that permits open self-signup.
SQL injection in GouGuOA 6.0.5 and earlier allows an attacker who can reach the /home/message/rubbish endpoint to inject arbitrary SQL through the keywords parameter, yielding full compromise of confidentiality, integrity and availability of the backend database (CWE-89, CVSS 3.1 base 9.8 as reported). The MITRE-supplied vector rates it unauthenticated (PR:N/UI:N), but our independent assessment lowers the privilege metric to PR:L because /home/message/rubbish is a message trash/recycle-bin function that in typical OA deployments is only reachable after login, so a valid session may in practice be a prerequisite - this materially changes the realistic attack surface and should be verified against the referenced write-up. No public exploit code has been confirmed and the CVE is not listed in CISA KEV, though a public technical write-up exists at the referenced GitHub repository; no EPSS score was available in the input, so no probability estimate is asserted.
OGNL expression injection in Apache Struts can lead to remote code execution, but only when an application is explicitly configured with the legacy RESTful action mapper - a non-default setting that standard deployments do not use. All version branches are affected in the abstract (2.0.0 through 2.3.37, 2.5.0 through 2.5.33, 6.0.0 through 6.11.0, and 7.0.0 through 7.3.0), and on the Struts 7 branch exploitation additionally requires the OGNL allowlist to have been disabled, which is not the default. NVD rates this 9.8 (AV:N/AC:L/PR:N/UI:N), while our independent assessment lowers it to AC:H because the decisive limiting factor is the non-default mapper configuration; where that mapper is absent the flaw is not reachable. No public exploit code or CISA KEV entry has been identified at time of analysis, and EPSS is low at 0.36% (28th percentile), so exposure is driven principally by configuration review rather than by observed exploitation. Fixes are available in Struts 6.12.0 and 7.4.0.
Object injection in the WordPress plugin Advanced Post Manager (all releases through version 4.5.5) lets remote attackers push attacker-controlled serialized data into PHP's unserialize() routine, potentially instantiating arbitrary objects and, where a usable POP gadget chain exists, achieving code execution with full confidentiality, integrity and availability impact. The NVD vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) treats the flaw as unauthenticated and network-reachable, whereas our independent assessment raises attack complexity to High because real-world impact hinges on a reachable gadget chain in the plugin, WordPress core or another active plugin; no public exploit identified at time of analysis and there is no CISA KEV entry for this CVE.
Unauthenticated input injection in ViewSonic vCast, the wireless screen-casting service bundled with ViewBoard interactive displays, lets a remote attacker push crafted HTTP requests at exposed service endpoints and have that data accepted without validation, which public research chains onward to remote code execution. Affected builds span vCast v0.0.0 through v3.2.715 and are reachable over the network with no credentials and no user interaction (CVSS 9.8, AV:N/PR:N/UI:N), so every ViewBoard whose vCast endpoints are network-reachable is exposed; a public technical write-up describing the exploit chain exists (blog.l3afs.space), while no CISA KEV entry confirms active exploitation at time of analysis. All available signals point to genuinely high real-world risk, with the practical limiting factor being network reachability of the vCast service rather than any missing precondition.
Remote code execution in dormakaba evolo Service (all versions) allows an unauthenticated network attacker to execute arbitrary code as SYSTEM via a .NET deserialization flaw, per a 9.8 CVSS vector. The service is typically deployed on internal access-control administration hosts, so exploitation generally requires access to the management network segment, and pre-auth reachability is asserted by the CVSS vector rather than the description. No CISA KEV entry or public exploit was identified at time of analysis; EPSS is 0.29% (20th percentile), while SSVC rates exploitation as none and technical impact as total.
Unauthenticated remote code execution affects dromara/northstar (a quantitative trading platform) through version 9.1.1 and earlier, because the application enables the embedded H2 Console while its authentication interceptor only guards the /northstar/** path, leaving /h2-console reachable with no credentials. Because the embedded H2 database also ships with the default 'sa' account and an empty password, any network-reachable attacker (CVSS 3.1: AV:N/AC:L/PR:N/UI:N, 9.8) can use the H2 console's CREATE ALIAS capability to execute arbitrary Java and thereby run arbitrary system commands on the host. Exploitation requires only that the Northstar instance be reachable over the network; there is no public exploit identified at time of analysis, though the cited GitHub reference is a technical write-up of the flaw, and this issue is not confirmed actively exploited (CISA KEV).
Remote code execution in WookTeam 1.6.6 and earlier lets an attacker inject arbitrary PHP into an eval() call reached through the task export API at /api/project/task/export, granting full server-side code execution. The CVSS 3.1 vector rates the flaw 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), i.e. unauthenticated and network-reachable with total impact, although the assessor cautions that project/task export routes commonly sit behind a login session, so a valid authenticated session or an otherwise exposed/mis-protected route may be the real prerequisite and the PR:N rating should be verified against WookTeam's auth middleware. Publicly available exploit code exists and SSVC rates the attack automatable with total technical impact, while EPSS remains low at 0.15% (4th percentile) - signals conflict on urgency, and overall risk is bounded mainly by WookTeam's limited deployment footprint rather than by exploit difficulty.
SQL injection in FineAdmin v1.0 allows attackers to reach the /Permissions/Button/List endpoint and inject crafted SQL through the field/order (sort) parameter handled by ButtonService.GetListByFilter(), exposing sensitive database contents. Publicly available exploit code exists (an author-published proof-of-concept write-up is referenced), but there is no confirmed active exploitation (CISA KEV), and EPSS is very low at 0.15% (4th percentile), reflecting the product's obscure, small deployment footprint. The vendor-supplied CVSS of 9.8 (PR:N) conflicts with the assessed vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, which assumes the attacker realistically needs an authenticated admin or back-office session because the affected function is an administrative permissions/button-management feature - that authentication prerequisite is the key limiting factor defenders should verify rather than the headline score.
Plaintext IMAP, SMTP, and CalDAV passwords belonging to other workspace members are disclosed to any authenticated low-privilege member of Twenty CRM versions 1.20.10 up to (but not including) 2.7.0 through the /metadata GraphQL connectedAccounts query, which returned the full ConnectedAccountDTO object - including the connectionParameters field - without hiding the password or enforcing the calling user's identity or account visibility. A normal workspace member can harvest those external-service credentials and use them to access other users' mail and calendars, and potentially to reset third-party accounts. Workspaces configured solely with Google or Microsoft OAuth connections store no plaintext password and are unaffected, and no public exploit code has been identified at time of analysis. Exploitation requires an authenticated account (CVSS PR:L), so realistic risk centers on malicious insiders, over-provisioned members, or compromised member accounts rather than unauthenticated external attackers.
Improper authorization in Plane before 1.4.0 lets an authenticated workspace Guest hijack file assets from other projects in the same workspace through ProjectBulkAssetEndpoint.post. By supplying valid asset UUIDs from a foreign project and reassigning issue_id, comment_id, page_id, draft_issue_id, or project_id to an entity they control, the attacker causes Plane to treat their project as owner and return a presigned download URL for the hijacked file. The flaw is assessed as CVSS 9.6 (PR:L, scope changed) and is fixed in 1.4.0; no public exploit identified at time of analysis.
Server-side request forgery in feelec-yishu feelcrm-os 1.0.0 allows unauthenticated remote attackers to make the application's server issue attacker-controlled HTTP requests through the getCurlData endpoint in App/Feelcrm/Index/Controller/GoogleController.class.php, by manipulating the 'url' argument. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms this is remotely reachable, low-complexity and requires no authentication or user interaction, while impact is uniformly LOW (VC:L/VI:L/VA:L) with no scope change, making it a limited-impact SSRF rather than a full internal pivot or credential-theft primitive. Publicly available exploit code exists and the issue was reported to the project, which has not yet responded with a fix; no confirmed active exploitation (CISA KEV) has been observed.
Server-side request forgery (CWE-918) in ChatGPTNextWeb NextChat up to and including 2.16.1 lets an unauthenticated, remote attacker who can reach the /api/proxy endpoint (the Proxy Fallback Handler) redirect the server's outbound HTTP requests to arbitrary hosts by supplying a crafted x-base-url header. Because the hostname is concatenated into the server-side fetch target without any validation against private, loopback, link-local, or cloud-metadata ranges, a successful attack can reach internal-only services or instance-metadata endpoints, with impact bounded by what the host's network position can actually reach. Publicly available exploit code exists (referenced GitHub issue #6813), but there is no confirmation of active exploitation; the fix is an unmerged pull request (#6884) that awaits acceptance, so no released patched version is independently confirmed and the risk should be treated as a genuine but medium-tier issue rather than an emergency.
Unauthenticated remote code execution is possible in Perforce P4 Search container images prior to 2026.4.2 due to an exposed Java Debug Wire Protocol (JDWP) interface. An attacker with network access to the JDWP port can execute arbitrary code as the P4 Search service account, potentially compromising the connected P4 Server. No public exploit code has been identified at time of analysis, but the issue is rated critical (CVSS 9.5 in CVSS 4.0, assessed as CVSS 3.1 with scope change) and requires the debug interface to be reachable (attack prerequisite AT:P), making it a genuine high-priority issue rather than a high-CVSS-but-low-risk artifact.
Perforce P4 Search before 2026.4.2 fails open when its service authentication token is blank, so an unauthenticated remote attacker with network access to the service can obtain the highest application privilege, potentially compromising both P4 Search and the P4 Server it is connected to (CWE-636). The vendor rates this CVSS 4.0 9.5; our independent assessment is CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H because the attack requires the victim deployment to be running in the blank-token configuration (Attack Requirements: Present), meaning deployments that set a non-blank service authentication token are not exploitable. No public exploit code has been identified at time of analysis, and there is no confirmed actively exploited (CISA KEV) status; the issue is nonetheless a genuine high-priority authentication bypass rather than a CVSS-inflated paper risk, and impact extends to the connected P4 Server.
SQL injection in the girishsaraf Online-Appointment-Booking-System (rolling release) lets unauthenticated remote attackers manipulate the countryid, townid, cid, didval, or cidval parameters in get_town.php to read or alter database contents with low confidentiality, integrity, and availability impact per the assessed vector. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation. The primary real-world limiting factor is deployment scarcity: this is an obscure single-maintainer PHP project unlikely to be exposed at scale, though any network-reachable default instance exposing the AJAX endpoint appears exploitable.
Unauthenticated SQL injection in the patient login handler of girishsaraf's Online-Appointment-Booking-System lets remote attackers manipulate the uname and psw parameters processed by mysqli_query in cover.php. Publicly available exploit code exists - the flaw was disclosed via a public GitHub issue (issue #5) - and the maintainer has not responded or shipped a fix, so every deployment of the rolling-release project is potentially affected. The assessed CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) confirms no credentials, user interaction, or special configuration are needed; the practical limiting factor is exposure, as this is a niche open-source project with few live instances, so CISA KEV does not list it and the overall risk is low-to-moderate and opportunistic rather than urgent.
Unauthenticated SQL injection in onetwothreeneth HospitalManagementSystem (PHP web app) lets a remote attacker inject arbitrary SQL through the transaction_id argument handled by the get function in print.php, allowing read and limited modification of the underlying database. The CVSS v4.0 vector (AV:N/AC:L/PR:N/UI:N, E:P) confirms remote, unauthenticated exploitation with no user interaction, and a publicly available exploit code exists (a proof-of-concept was filed as GitHub issue #11). Exploitation is constrained less by technique than by exposure: the application is an obscure open-source project with limited real-world deployment, so real-world risk is real but lower priority than the numeric score alone suggests.
Hard-coded JWT signing key in Lybbn Django-Vue-Lyadmin through version 3.2.12 allows remote attackers who know the publicly documented default SECRET_KEY in backend/application/settings.py to forge valid JSON Web Tokens, impersonating arbitrary users and bypassing authentication (CWE-321). Publicly available exploit code exists, but exposure is context-dependent: the maintainer states the key is documented and must be changed manually before deployment, so any instance that rotated SECRET_KEY to a private value is not affected. Our independent assessment rates this CVSS 3.1 9.1 (network-reachable, no authentication or user interaction required against an unremediated instance) versus the CVSS 4.0 5.5 recorded by VulDB, but the decisive limiting factor is operator configuration rather than attacker capability.
Improper authorization in onetwothreeneth HospitalManagementSystem (Account Administration component) allows remote attackers to modify arbitrary user subaccounts by manipulating the user_id parameter in the update_subaccount function of php/controller.php. Public exploit code exists, and the independent assessment indicates the flaw is an IDOR-style defect that likely requires an authenticated session, with low impact to confidentiality, integrity, and availability. No vendor patch is available; the project was notified but has not responded, and version details are unavailable due to the rolling release model.
SQL injection in SourceCodester Online Reviewer Management System 1.0 allows an attacker to manipulate the SQL statement executed by the administrative assessment handler at /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update by supplying crafted input in the 'Subject' argument, enabling unauthorized read and modification of data stored by the application. Publicly available exploit code exists (referenced through a GitHub proof-of-concept issue linked from the VulDB entry), but there is no CISA KEV listing confirming active exploitation, and no EPSS signal was provided. Impact is bounded rather than catastrophic: our independent assessment (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) rates confidentiality, integrity and availability effects as low, and exploitation likely requires an authenticated admin/reviewer session to reach the /admins/ path despite the vendor's CVSS 4.0 vector claiming PR:N; the dominant real-world limiter is that this product is rarely run in production.
Unauthenticated SQL injection in the signup.php registration handler of girishsaraf Online-Appointment-Booking-System lets remote attackers inject arbitrary SQL through the 'fname' form parameter, potentially reading or altering the application's backend database. The flaw carries a CVSS v4.0 base score of 6.9 (CVSS:3.1 equivalent assessed as 6.9, AV:N/AC:L/PR:N/UI:N with low confidentiality, integrity and availability impact) and publicly available exploit code exists, though there is no evidence of confirmed active exploitation (CISA KEV). No official patch is available: the project ships as a rolling release, version information is unavailable, and the maintainer was notified via GitHub issue #9 but has not responded, so the practical risk is driven mainly by exposure of the niche open-source application rather than by attack complexity.
Unauthenticated SQL injection in the Doctor Search endpoint (locateus.php) of girishsaraf's Online-Appointment-Booking-System lets remote attackers inject arbitrary SQL through the 'doctorname' request argument, potentially reading or altering data reachable by the application's database account. Because the project uses a rolling release model, no fixed version is published and the issue report filed against the upstream repository remains unanswered, so every deployed instance that exposes locateus.php over the network is potentially affected. Publicly available exploit code exists (CVSS 4.0 E:P), though the vulnerability is not confirmed as actively exploited and requires the niche PHP application to be publicly reachable for real-world abuse; the vendor has issued no patch.
Unauthenticated SQL injection in the administrative login handler (Admin/mlogin.php) of girishsaraf's Online-Appointment-Booking-System allows remote attackers to manipulate the uname and pass parameters, which are passed unsanitized into mysqli_query. Exploitation requires only network reachability to the admin login endpoint - no credentials, user interaction, or non-default configuration - making it trivially automatable against any exposed instance; the CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) is rated 6.9, and publicly available exploit code exists (reported via VulDB). The vendor was notified through a GitHub issue but has not responded, and because the project follows a rolling-release model there is no fixed version to upgrade to, so no vendor-released patch is identified at time of analysis. The project is a rarely deployed open-source PHP application, so real-world exposure is limited to internet- or network-reachable instances.
Unauthenticated SQL injection in onetwothreeneth HospitalManagementSystem (rolling release, confirmed vulnerable through commit 9ef91ed6007314b6473110ed699dff76d158f61d) lets remote attackers inject arbitrary SQL through the transaction_id parameter of transaction_details.php, exposing or altering database contents such as patient and billing records. Publicly available exploit code exists (disclosed via a public GitHub issue), and exploitation requires no authentication or user interaction, though its CVSS 4.0 base score of 6.9 reflects limited confidentiality, integrity, and availability impact rather than total compromise. There is no CISA KEV entry confirming active exploitation and no vendor patch: the project was notified through an issue report but has not responded, and the rolling-release model means no fixed version has been published.
SQL injection in onetwothreeneth HospitalManagementSystem lets remote attackers execute arbitrary SQL through the transaction_idS parameter handled by php/controller.php, allowing limited confidentiality and integrity impact (CVSS 4.0 base 5.5). Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV), and the project has not released a fix or responded to the report. The CVSS vector indicates unauthenticated reachability (PR:N), though the advisory does not confirm whether the vulnerable endpoint is accessible before application login, so deployed instances that require a session may limit the attack to authenticated users.
SQL injection in itsourcecode Online Admission System Project 1.0 exposes the admin login handler at /admin/login1.php, where the User parameter is used in a database query without adequate sanitization. Remote unauthenticated attackers can submit crafted input to the login form and manipulate SQL statements, with limited confidentiality, integrity, and availability impacts per the provided CVSS 4.0 score of 6.9 and the independent CVSS 3.1 assessment. Publicly available exploit code exists, no CISA KEV active exploitation is confirmed, and the realistic exposed population is small because this is a rarely deployed sample application.
SQL injection in SourceCodester Online Reviewer Management System 1.0 lets unauthenticated remote attackers execute arbitrary database queries through the 'Subject' GET parameter of /reviewer_0/admins/assessments/Subject/btn_functions.php when action=course. Per the CVSS v4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, E:P) no credentials or user interaction are required against a default deployment, and publicly available exploit code exists (a proof-of-concept was published via the VulDB-linked GitHub issue); there is no confirmed active exploitation (CISA KEV). Impact is scoped to confidentiality, integrity and availability of the application's backend data at a low level, making this a moderate-severity, exposure-dependent risk rather than a broad remote-takeover event.
Unauthenticated SQL injection in the delivery-partner registration page (delivery/deliverysignup.php) of kishor-23's food-waste-management-system PHP project allows remote attackers to manipulate the username, email, and location form fields to inject arbitrary SQL. The flaw affects the project as shipped on its rolling-release branches (no fixed version details are published), and publicly available exploit code exists, though there is no indication of confirmed active exploitation. Per the assessed impact, an attacker can achieve only partial confidentiality, integrity, and availability loss rather than full database takeover, and exploitation requires that a network-reachable instance of this niche application be deployed.
Unauthenticated SQL injection in the kishor-23 Food Waste Management System allows remote attackers to tamper with database queries through the Admin Registration handler at admin/signup.php, manipulating the email, username, and location parameters. Because the vulnerable endpoint is the public signup form, no authentication, user interaction, or special configuration is needed - the only practical prerequisite is that the application be network-reachable. Publicly available exploit code exists (documented in the project's GitHub issue #15 and catalogued by VulDB), and the vendor has not responded to the report; no CISA KEV listing has been observed, so this is exploit-code availability rather than confirmed active exploitation. Per the authoritative assessment the impact is bounded to Low confidentiality, integrity, and availability with no privilege escalation or system-wide compromise implied, making this a low-to-moderate real-world priority driven by the small deployment footprint of an open-source project unlikely to be exposed in production.
Unauthenticated SQL injection in the kishor-23 Food Waste Management System (PHP web application) lets a remote attacker inject arbitrary SQL through the delivery_person_id and order_id parameters handled by delivery/deliverymyord.php, permitting partial reading and modification of the application's database. Tracked as CVE-2026-105230 (CWE-89) and scored 6.9 under CVSS 4.0, with an independently assessed equivalent of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, the flaw requires no credentials or victim interaction and only network reachability of the exposed endpoint; publicly available exploit code exists and the upstream issue report has gone unanswered. Because the project ships as a rolling release with no tagged versions, neither affected nor patched releases can be enumerated, and no vendor fix is available at time of analysis.
SQL injection in itsourcecode Online Admission System 1.0 lets remote attackers manipulate the ID argument processed by /admin/examinee.php and inject arbitrary SQL into the application's database queries, potentially exposing or altering stored admission records. Exploitation is assisted by publicly available exploit code (publicly available exploit code exists; VulDB submission and a public GitHub issue reference the flaw) and the CVSS 4.0 vector rates it 6.9 with E:P (proof-of-concept maturity), but there is no CISA KEV entry, so this is not confirmed actively exploited (CISA KEV). The practical limiting factor is reachability: the vulnerable script sits under /admin/, so while the provided CVSS 4.0 vector claims PR:N/UI:N, deployments that enforce an admin login would require valid or bypassed admin credentials, which our independent assessment reflects by modeling the flaw as PR:L with high confidentiality impact.
SQL injection in SourceCodester Online Reviewer Management System 1.0 lets remote attackers manipulate the Title argument in /reviewer_0/admins/assessments/activities/btn_functions.php?action=update to alter database queries, and publicly available exploit code exists. The supplied CVSS 4.0 vector is 6.9 with PR:N, but the independent assessment notes the '/admins/' path strongly implies administrative authentication; if that login gates the endpoint, exploitation requires authenticated admin access. Because the product is niche and real-world exposure depends on whether the admin area is reachable, this is assessed as a low-to-moderate priority despite the public exploit.
Unauthenticated SQL injection in itsourcecode Online Admission System 1.0 allows remote attackers to manipulate the 'User' login argument in /login1.php to execute arbitrary SQL queries against the underlying database. Publicly available exploit code exists, but the product is a niche educational PHP application with limited real-world deployment, and the assessed impact is Low (VC:L/VI:L/VA:L), indicating partial rather than full database compromise. Signals are mixed and lean toward low-to-moderate real-world risk despite the network-facing, unauthenticated nature of the flaw.
SQL injection in UNION HospitalManagementSystem lets remote, unauthenticated attackers manipulate the patient_id parameter in patient_info.php to read or modify limited data in the underlying database. The flaw affects a rolling-release PHP project, with publicly available exploit code and no fixed version identified because the maintainers have not responded; exploitation requires a deployed, reachable instance. Despite the medium CVSS, real-world priority is low because this is a small open-source hospital management system without an enterprise footprint.
Unauthenticated SQL injection in OrdaSoft Joomla CCK before 8.3.16 allows remote attackers to execute arbitrary SQL via the user-supplied order column for records, compromising the confidentiality, integrity, and availability of the Joomla database. The flaw affects only sites that have installed this third-party CCK extension, so prevalence is the main limiting factor; no public exploit code was identified at time of analysis, and there is no KEV confirmation of active exploitation. With a CVSS 4.0 score of 9.3 and an independent CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:N/C:H/I:H/A:H, this is a high-priority issue for affected deployments.
Unauthenticated blind SQL injection in the WordPress plugin WP BASE Booking (wp-base-booking-of-appointments-services-and-events) in all versions up to and including 6.4.0 lets remote attackers inject arbitrary SQL into database queries by manipulating request parameters handled by the plugin. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no credentials, user interaction, or special configuration are required - any site with the plugin installed and reachable over the network is exposed, and exploitation is limited only by the fact that the injection is blind, so data must be extracted through boolean or time-based inference rather than direct query output. Patchstack rates this Critical (9.3) with a scope change, and the upstream advisory is the only public reference; no public exploit code and no CISA KEV entry were identified at time of analysis.
An authenticated user holding openSIS Classic 9.3's built-in teacher role can reset the password of any other staff account by supplying an arbitrary staff_id value to the School Information update path, giving a low-privileged operator full control of higher-privileged accounts. The flaw is a classic user-controlled key (CWE-639) authorization bypass: the application trusts the staff_id request parameter when populating the session's staff context and then uses that context to authorize a password change without confirming it matches the caller's own user_id. Only a valid teacher-level session is required; no admin rights, user interaction, or non-default configuration is needed, and severity is rated 9.3 (CVSS:4.0 AV:N/AC:L/AT:N/PR:L/UI:N with high confidentiality and integrity impact plus scope change), consistent with an independent assessment of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N. No public exploit code and no confirmed active exploitation were identified at time of analysis, but the vendor reports a patch and the affected code path is trivially reachable for any authenticated teacher.
Incorrect authorization in the Camunda 7 Admin web application (7.24.0 through 7.24.14) lets an unauthenticated remote attacker reach the first-run setup user-create endpoint and create a new administrator account, enabling account takeover and, via admin-level process deployment or scripting, code execution as the workflow engine's service user (CWE-863, CVSS 9.2). Exploitation is not default-configuration remote takeover: the setup endpoint only becomes reachable when the camunda-admin group contains zero direct members while the deployment is nonetheless fully administered through configured authorizations, which is why the assessed CVSS 3.1 vector is AV:N/AC:H/PR:N/UI:N and the CVSS 4.0 vector carries AT:P. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released a fixed version, 7.24.15.