Threat database

CVE-2026-78245 is a medium severity vulnerability in itsourcecode Online Pharmacy System 1.0. It involves an unrestricted file upload flaw in the move_uploaded_file function within the User Registration component (all_users/register.php). This vulnerability allows remote attackers to manipulate the photo argument to upload arbitrary files. An exploit has been published, but no known active exploitation in the wild is reported.

CVE-2026-78202 is a medium severity vulnerability in itsourcecode Payroll System version 1.0. It involves an unrestricted file upload flaw in the save_settings function of the admin_class.php file. This vulnerability allows remote attackers to upload files without restriction by manipulating the img argument. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported.

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php.

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php.