CVE-2026-6000 is a medium severity information disclosure vulnerability in version 1.0 of the code-projects Online Library Management System. It involves an unknown function within the /sql/library.sql file related to the SQL Database Backup File Handler. The vulnerability can be exploited remotely without privileges or user interaction, potentially allowing an attacker to disclose sensitive information. The exploit details have been made public, but no official patch or remediation guidance is currently available.
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authentication and authorization checks in the `pay_incomplete_order()` function. The function accepts an attacker-controlled `order_id` parameter and uses it to look up order data, then writes billing fields to the order owner's profile (`$order_data->user_id`) without verifying the requester's identity or ownership. Because the Tutor nonce (`_tutor_nonce`) is exposed on public frontend pages, this makes it possible for unauthenticated attackers to overwrite the billing profile (name, email, phone, address) of any user who has an incomplete manual order, by sending a crafted POST request with a guessed or enumerated `order_id`.
A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation.
A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for appropriate cleaning or validation.
A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.
An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600 allows a local attacker with low privileges to cause a complete Denial of Service (DoS).
When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again.
This issue affects Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600:
* 23.2 versions before 23.2R2-S6,
* 23.4 versions before 23.4R2-S7
* 24.2 versions before 24.2R2-S2,
* 24.4 versions before 24.4R2,
* 25.2 versions before 25.2R1-S1, 25.2R2.
An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service (DoS).
When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again.
This issue affects Junos OS on SRX1600, SRX2300 and SRX4300:
* 24.4 versions before 24.4R1-S3, 24.4R2.
This issue does not affect Junos OS versions before 24.4R1.
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to 27.0.3 and 28.0.1, the redirect parameter upon login to LORIS was not validating the value of the redirect as being within LORIS, which could be used to trick users into visiting arbitrary URLs if they are given a link with a third party redirect parameter. This vulnerability is fixed in 27.0.3 and 28.0.1.
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the 'tips' parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the 'tips' parameter, causing the total price to be reduced to zero.
CVE-2026-5836 is a medium severity cross-site scripting (XSS) vulnerability in version 1.0 of code-projects Online Shoe Store. The issue exists in the /admin/admin_product.php file where the product_name parameter can be manipulated to execute XSS attacks. The vulnerability can be exploited remotely and requires user interaction with high privileges. No official patch or remediation guidance is currently available from the vendor. The exploit has been publicly disclosed but no known active exploitation in the wild has been reported.
CVE-2026-5835 is a medium severity cross-site scripting (XSS) vulnerability in code-projects Online Shoe Store version 1.0. The flaw exists in an unspecified functionality of the /admin/admin_football.php file, where manipulation of the product_name argument can lead to XSS. The vulnerability can be exploited remotely and requires high privileges with user interaction. No official patch or remediation guidance is currently available.
CVE-2026-5834 is a cross-site scripting (XSS) vulnerability in code-projects Online Shoe Store version 1.0. The issue exists in an unknown function within the /admin/admin_running.php file, where manipulation of the product_name argument allows remote attackers to execute XSS attacks. The vulnerability has a medium severity rating with a CVSS score of 4.8. There is no official patch or remediation information available at this time, and no known exploits are reported in the wild.
CVE-2026-5814 is a medium severity SQL injection vulnerability in PHPGurukul Online Course Registration version 3.1. It arises from improper handling of the 'regno' parameter in the /admin/check_availability.php file, allowing remote attackers to inject SQL commands. The vulnerability has been publicly disclosed but no official patch or remediation guidance is currently available. Exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected system's data.
CVE-2026-5811 is a medium severity vulnerability in SourceCodester Online Food Ordering System version 1.0. It involves business logic errors caused by manipulation of the price parameter in the save_product function within the /Actions.php file. The vulnerability can be exploited remotely without user interaction or privileges. Although an exploit is publicly available, there are no known exploits in the wild. No official patch or remediation guidance has been provided yet.
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 24.0.0 to before 27.0.3 and 28.0.1, an incorrect order of operations in the FilesDownloadHandler could result in an attacker escaping the intended download directories. This vulnerability is fixed in 27.0.3 and 28.0.1.
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 15.10 to before 27.0.3 and 28.0.1, there is a potential for a cross-site scripting attack in the survey_accounts module if a user provides an invalid visit label. While the data is properly JSON encoded, the Content-Type header is not set causing the web browser to interpret the payload as HTML, opening the possibility of a cross-site scripting if a user is tricked into following an invalid link. This vulnerability is fixed in 27.0.3 and 28.0.1.
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's POST request rather than the internal LORIS value. This could result in a theoretical attacker with publication module access forging an email to an external domain under the attacker's control which appeared to come from LORIS. This vulnerability is fixed in 27.0.3 and 28.0.1.
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 21.0.0 to before 27.0.3 and 28.0.1, while the document_repository frontend was restricting file access, the backend endpoint was not correctly verifying access permissions. A user could theoretically download a file that they should not have access to, if they know or can brute force the filename. This vulnerability is fixed in 27.0.3 and 28.0.1.