Skip to content

Commit fa68fc6

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-9chf-65gj-5q8w GHSA-pj25-44r7-9g5g GHSA-pvmm-x2wc-97cp GHSA-r67f-r5w4-2xq5 GHSA-xf57-64xg-r6jf
1 parent 39f33da commit fa68fc6

5 files changed

Lines changed: 300 additions & 0 deletions

File tree

‎advisories/unreviewed/2026/07/GHSA-9chf-65gj-5q8w/GHSA-9chf-65gj-5q8w.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9chf-65gj-5q8w",
4+
"modified": "2026-07-05T21:30:23Z",
5+
"published": "2026-07-05T21:30:23Z",
6+
"aliases": [
7+
"CVE-2026-14770"
8+
],
9+
"details": "A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_room.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14770"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/orionyan520/cve_report/issues/3"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-14770"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/849106"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/376360"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/376360/cti"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://www.sourcecodester.com"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-74"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-05T21:16:54Z"
59+
}
60+
}

‎advisories/unreviewed/2026/07/GHSA-pj25-44r7-9g5g/GHSA-pj25-44r7-9g5g.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-pj25-44r7-9g5g",
4+
"modified": "2026-07-05T21:30:22Z",
5+
"published": "2026-07-05T21:30:22Z",
6+
"aliases": [
7+
"CVE-2026-14767"
8+
],
9+
"details": "A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoice_no results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14767"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://codeastro.com"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gist.github.com/menelausx/2222914494e28e7d70f9a35af8fae824"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-14767"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/850623"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/376357"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/376357/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-74"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-05T20:16:31Z"
59+
}
60+
}

‎advisories/unreviewed/2026/07/GHSA-pvmm-x2wc-97cp/GHSA-pvmm-x2wc-97cp.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-pvmm-x2wc-97cp",
4+
"modified": "2026-07-05T21:30:22Z",
5+
"published": "2026-07-05T21:30:22Z",
6+
"aliases": [
7+
"CVE-2026-14769"
8+
],
9+
"details": "A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14769"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/6Justdododo6/CVE/issues/28"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://code-projects.org"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-14769"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/849374"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/376359"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/376359/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-74"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-05T21:16:54Z"
59+
}
60+
}

‎advisories/unreviewed/2026/07/GHSA-r67f-r5w4-2xq5/GHSA-r67f-r5w4-2xq5.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-r67f-r5w4-2xq5",
4+
"modified": "2026-07-05T21:30:22Z",
5+
"published": "2026-07-05T21:30:22Z",
6+
"aliases": [
7+
"CVE-2026-14766"
8+
],
9+
"details": "A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/search-result.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14766"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://codeastro.com"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gist.github.com/menelausx/29aef0a0ab6f289c0f45b379f6d759d7"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-14766"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/850616"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/376356"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/376356/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-74"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-05T19:16:28Z"
59+
}
60+
}

‎advisories/unreviewed/2026/07/GHSA-xf57-64xg-r6jf/GHSA-xf57-64xg-r6jf.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-xf57-64xg-r6jf",
4+
"modified": "2026-07-05T21:30:22Z",
5+
"published": "2026-07-05T21:30:22Z",
6+
"aliases": [
7+
"CVE-2026-14768"
8+
],
9+
"details": "A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14768"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/6Justdododo6/CVE/issues/27"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://code-projects.org"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-14768"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/849302"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/376358"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/376358/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-74"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-07-05T20:16:31Z"
59+
}
60+
}

0 commit comments

Comments
 (0)