CVE Vulnerability Catalog

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete_judge.php. Such manipulation of the argument judge_id leads to SQL injection. The attack can be executed remotely. The exploit is publicly available and might be used.

A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the file /admin/edit_team.php. The manipulation of the argument num_id results in SQL injection. The attack may be launched remotely. The exploit has been made public and could be used.

SQL Injection vulnerability in /admin/edit_judge.php of itsourcecode Electronic Judging System 1.0. Attack via manipulation of judge_id parameter, remotely exploitable. Exploit is publicly available.

Vulnerability in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2 allows remote SQL injection via the sort parameter in /SubstationWEBV2/app/..;/calc/getCalcmeterDetailDayListTree. Exploit is publicly available.

In the Archive::Tar library for Perl versions before 3.10, memory exhaustion is possible via an attacker-controlled entry size field in the tar header. The _read_tar() function allocates a scalar based on the header size without an upper bound.

The bitsery library (fraillt) up to version 5.2.4 has a vulnerability in the loadFromSharedState function in include/bitsery/ext/std_smart_ptr.h, due to improper validation of input type. Remote attack possible. Exploit publicly disclosed. Fixed in version 5.2.5.

A vulnerability in Archive::Tar for Perl before version 3.08 allows extraction of hardlinks to attacker-controlled paths outside the extraction directory. The _make_special_file() function passes the tar header's linkname to link() without validating absolute paths or '..' segments, creating a hardlink to the victim file. A subsequent write through the extracted name modifies the victim file, and the _extract_file() block (guarded only against symlinks) applies permissions, owner, and timestamps to the shared inode.

hemant6488 CodeIgniter-StudentManagementSystem has a vulnerability in the /index.php/students/addStudentView function that allows improper access controls. The attack can be executed remotely and the exploit has been publicly disclosed.

The Unlimited Elements For Elementor plugin up to version 2.0.8 is vulnerable to blind SQL Injection. Attackers can inject SQL queries through unsanitized parameters, allowing unauthorized database access.

Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce before version 2.3.0, allowing exploitation of incorrectly configured access control security levels.

The Smart Manager plugin for WordPress contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions up to and including 8.85.0.

Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout from n/a through 2.161.

The CformsII WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to 15.1.3. An attacker can trick an administrator into performing unwanted actions.

The Broadcast Live Video plugin by VideoWhisper.Com for WordPress before version 7.1.3 contains a Code Injection vulnerability. This allows an attacker to inject and execute arbitrary code.

Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7 have insufficient HTML sanitization that could lead to CSS injection via an SVG document with an animate element using the attributeName attribute.

Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1 have insecure code evaluation logic in the LDAP autovalues option that could lead to code injection. Support for code evaluation has been removed in versions 1.6.16 and 1.7.1.

Roundcube Webmail versions 1.6.x between 1.6.14 and 1.6.16, and 1.7.x before 1.7.1 have insufficient CSS sanitization in HTML emails, which may lead to SSRF or information disclosure if stylesheet links point to local network hosts. The issue stems from an incomplete fix for CVE-2026-35540.

Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1 contain a pre-authentication SQL injection vulnerability in the virtuser_query plugin. The vulnerability is due to a backslash escape bypass in preg_replace().

Stack-based buffer overflow vulnerability in the formSDHCP function in /goform/formSDHCP on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.

Stack-based buffer overflow vulnerability in the formStats function in /goform/formStats on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.