CWE-538

CWE-538 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-538, highest CVSS first.

  1. MEDIUM 5.3CVE-2026-108937public PoC2026-10-12

    A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the a…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-127622026-08-05

    IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.

    business automation insights

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-44828public PoC2026-10-12

    Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained …

    AI risk analysis on Exploit-DB.ai →