CVE-2026-7744 is a medium-severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. The flaw exists in an unspecified function within the /OnlineClassroom/addnewstudent file, where manipulation of the 'fname' parameter allows SQL injection. This vulnerability can be exploited remotely without user interaction or elevated privileges. Although the exploit code has been publicly disclosed, there are no known exploits observed in the wild. No official patch or remediation guidance has been provided by the vendor at this time.
A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of the argument deleteid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the argument fid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
CVE-2026-7689 is a medium-severity vulnerability in Dolibarr ERP CRM versions up to 23.0.2. It involves improper verification of cryptographic signatures in the dol_verifyHash function within the Online Signature Module. The flaw can be exploited remotely but requires high attack complexity and no user interaction. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available. Public exploit code has been released, increasing the risk of potential attacks.
A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used.
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.
Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php component
CVE-2026-7238 is a medium-severity vulnerability in code-projects Online Music Site version 1.0. It involves an unrestricted file upload flaw in the /Administrator/PHP/AdminUpdateAlbum.php script, specifically via manipulation of the txtimage argument. This vulnerability allows remote attackers with high privileges to upload files without restriction. The exploit has been published but there are no known exploits in the wild. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-7196 is a medium severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. It affects an unknown function in the /guestdetails file where the deleteid argument can be manipulated to perform SQL injection attacks remotely. The vulnerability has been publicly disclosed but there are no known exploits in the wild. No official patch or remediation guidance is currently available from the vendor.
A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepic.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.
A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /download.php. The manipulation of the argument File results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.
A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.