Skip to content
OpenAdvisories

Archive

13 April 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.3
    CVE-2026-6183 Public exploit

    code-projects Simple Content Management System index.php sql injection

    A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitat…

  • High 7.3
    CVE-2026-6182 Public exploit

    code-projects Simple Content Management System login.php sql injection

    A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be…

  • High 8.8
    CVE-2026-29955 Public exploit

    The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. T…

  • High 8.0
    CVE-2026-31281 Public exploit

    Totara LMS v19.1.5 and before is vulnerable to HTML Injection. An attacker can inject malicious HTML code in a message …