LỖ HỔNG Tra cứu CVE Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.
16
employee and visitor gate pass logging system 15
employee task management system 15
service provider management system 15
simple customer relationship management system 15
student study center desk management system 15
simple student attendance system 14
online car wash booking system 13
simple cold storage management system 13
car driving school management system 12
simple realtime quiz system 12
establishment billing management system 11
student grading system 11
lot reservation management system 9
CVE-2026-3702 TRUNG BÌNH 6.1 A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be
08/03/2026
CVE-2026-26892 CAO 7.2 Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php.
03/03/2026
CVE-2026-26891 THẤP 2.7 Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php.
03/03/2026
CVE-2026-26889 THẤP 2.7 Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php.
03/03/2026
CVE-2026-26888 THẤP 2.7 Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php.
03/03/2026
CVE-2026-26887 THẤP 2.7 Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php.
03/03/2026
CVE-2026-26890 THẤP 2.7 Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php.
03/03/2026
CVE-2026-26886 THẤP 2.7 Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php.
03/03/2026
CVE-2026-26885 THẤP 2.7 Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service.
03/03/2026
CVE-2026-26884 THẤP 2.7 Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php.
03/03/2026
CVE-2026-26883 THẤP 2.7 Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment.
03/03/2026
CVE-2026-26707 NGHIÊM TRỌNG 9.8 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php.
02/03/2026
CVE-2026-26706 NGHIÊM TRỌNG 9.8 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php.
02/03/2026
CVE-2026-26705 NGHIÊM TRỌNG 9.8 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php.
02/03/2026
CVE-2026-26704 NGHIÊM TRỌNG 9.8 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php.
02/03/2026
CVE-2026-26708 NGHIÊM TRỌNG 9.8 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php.
02/03/2026
CVE-2026-2848 NGHIÊM TRỌNG 9.8 A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The e
20/02/2026