<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 30 Apr 2026 19:51:10 +0000</lastBuildDate>
    <item>
      <title>9bd1924f-e322-4769-b35e-ca866c6f497c</title>
      <link>https://db.gcve.eu/sighting/9bd1924f-e322-4769-b35e-ca866c6f497c/export</link>
      <description>{"uuid": "9bd1924f-e322-4769-b35e-ca866c6f497c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28139", "type": "seen", "source": "https://t.me/cibsecurity/16467", "content": "\u203c CVE-2020-28139 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:21.000000Z"}</description>
      <content:encoded>{"uuid": "9bd1924f-e322-4769-b35e-ca866c6f497c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28139", "type": "seen", "source": "https://t.me/cibsecurity/16467", "content": "\u203c CVE-2020-28139 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/9bd1924f-e322-4769-b35e-ca866c6f497c/export</guid>
      <pubDate>Tue, 17 Nov 2020 22:39:21 +0000</pubDate>
    </item>
    <item>
      <title>15dfd26a-0a9b-4a16-b5b4-87ba1a7dfb46</title>
      <link>https://db.gcve.eu/sighting/15dfd26a-0a9b-4a16-b5b4-87ba1a7dfb46/export</link>
      <description>{"uuid": "15dfd26a-0a9b-4a16-b5b4-87ba1a7dfb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28133", "type": "seen", "source": "https://t.me/cibsecurity/16470", "content": "\u203c CVE-2020-28133 \u203c\n\nAn issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:25.000000Z"}</description>
      <content:encoded>{"uuid": "15dfd26a-0a9b-4a16-b5b4-87ba1a7dfb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28133", "type": "seen", "source": "https://t.me/cibsecurity/16470", "content": "\u203c CVE-2020-28133 \u203c\n\nAn issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:25.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/15dfd26a-0a9b-4a16-b5b4-87ba1a7dfb46/export</guid>
      <pubDate>Tue, 17 Nov 2020 22:39:25 +0000</pubDate>
    </item>
    <item>
      <title>1b1e678e-08ff-4b85-9d6b-bc679267b376</title>
      <link>https://db.gcve.eu/sighting/1b1e678e-08ff-4b85-9d6b-bc679267b376/export</link>
      <description>{"uuid": "1b1e678e-08ff-4b85-9d6b-bc679267b376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28138", "type": "seen", "source": "https://t.me/cibsecurity/16472", "content": "\u203c CVE-2020-28138 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:27.000000Z"}</description>
      <content:encoded>{"uuid": "1b1e678e-08ff-4b85-9d6b-bc679267b376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28138", "type": "seen", "source": "https://t.me/cibsecurity/16472", "content": "\u203c CVE-2020-28138 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/1b1e678e-08ff-4b85-9d6b-bc679267b376/export</guid>
      <pubDate>Tue, 17 Nov 2020 22:39:27 +0000</pubDate>
    </item>
    <item>
      <title>613fa02f-4f34-4823-8781-b90943b4f7e6</title>
      <link>https://db.gcve.eu/sighting/613fa02f-4f34-4823-8781-b90943b4f7e6/export</link>
      <description>{"uuid": "613fa02f-4f34-4823-8781-b90943b4f7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28136", "type": "seen", "source": "https://t.me/cibsecurity/16473", "content": "\u203c CVE-2020-28136 \u203c\n\nAn Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:28.000000Z"}</description>
      <content:encoded>{"uuid": "613fa02f-4f34-4823-8781-b90943b4f7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28136", "type": "seen", "source": "https://t.me/cibsecurity/16473", "content": "\u203c CVE-2020-28136 \u203c\n\nAn Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-17T22:39:28.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/613fa02f-4f34-4823-8781-b90943b4f7e6/export</guid>
      <pubDate>Tue, 17 Nov 2020 22:39:28 +0000</pubDate>
    </item>
    <item>
      <title>9dbe21c0-6945-46ad-8599-ab0da5bddd71</title>
      <link>https://db.gcve.eu/sighting/9dbe21c0-6945-46ad-8599-ab0da5bddd71/export</link>
      <description>{"uuid": "9dbe21c0-6945-46ad-8599-ab0da5bddd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28130", "type": "seen", "source": "https://t.me/cibsecurity/16491", "content": "\u203c CVE-2020-28130 \u203c\n\nAn Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos (under the web root).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T00:39:39.000000Z"}</description>
      <content:encoded>{"uuid": "9dbe21c0-6945-46ad-8599-ab0da5bddd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28130", "type": "seen", "source": "https://t.me/cibsecurity/16491", "content": "\u203c CVE-2020-28130 \u203c\n\nAn Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos (under the web root).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T00:39:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/9dbe21c0-6945-46ad-8599-ab0da5bddd71/export</guid>
      <pubDate>Wed, 18 Nov 2020 00:39:39 +0000</pubDate>
    </item>
    <item>
      <title>f3a19bc5-caa7-481b-8228-f68747d52ca9</title>
      <link>https://db.gcve.eu/sighting/f3a19bc5-caa7-481b-8228-f68747d52ca9/export</link>
      <description>{"uuid": "f3a19bc5-caa7-481b-8228-f68747d52ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28139", "type": "seen", "source": "https://t.me/cibsecurity/17351", "content": "\u203c CVE-2020-28139 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:13.000000Z"}</description>
      <content:encoded>{"uuid": "f3a19bc5-caa7-481b-8228-f68747d52ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28139", "type": "seen", "source": "https://t.me/cibsecurity/17351", "content": "\u203c CVE-2020-28139 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/f3a19bc5-caa7-481b-8228-f68747d52ca9/export</guid>
      <pubDate>Wed, 09 Dec 2020 04:25:13 +0000</pubDate>
    </item>
    <item>
      <title>4e8f1601-8bc0-49bb-9e5d-1a3c7a1b43e9</title>
      <link>https://db.gcve.eu/sighting/4e8f1601-8bc0-49bb-9e5d-1a3c7a1b43e9/export</link>
      <description>{"uuid": "4e8f1601-8bc0-49bb-9e5d-1a3c7a1b43e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28133", "type": "seen", "source": "https://t.me/cibsecurity/17354", "content": "\u203c CVE-2020-28133 \u203c\n\nAn issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:17.000000Z"}</description>
      <content:encoded>{"uuid": "4e8f1601-8bc0-49bb-9e5d-1a3c7a1b43e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28133", "type": "seen", "source": "https://t.me/cibsecurity/17354", "content": "\u203c CVE-2020-28133 \u203c\n\nAn issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/4e8f1601-8bc0-49bb-9e5d-1a3c7a1b43e9/export</guid>
      <pubDate>Wed, 09 Dec 2020 04:25:17 +0000</pubDate>
    </item>
    <item>
      <title>33ce6ae9-b440-4f52-a546-8659c3378c41</title>
      <link>https://db.gcve.eu/sighting/33ce6ae9-b440-4f52-a546-8659c3378c41/export</link>
      <description>{"uuid": "33ce6ae9-b440-4f52-a546-8659c3378c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28138", "type": "seen", "source": "https://t.me/cibsecurity/17356", "content": "\u203c CVE-2020-28138 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:19.000000Z"}</description>
      <content:encoded>{"uuid": "33ce6ae9-b440-4f52-a546-8659c3378c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28138", "type": "seen", "source": "https://t.me/cibsecurity/17356", "content": "\u203c CVE-2020-28138 \u203c\n\nSourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/33ce6ae9-b440-4f52-a546-8659c3378c41/export</guid>
      <pubDate>Wed, 09 Dec 2020 04:25:19 +0000</pubDate>
    </item>
    <item>
      <title>344d03da-b95f-47b1-8c8e-682f05c650b7</title>
      <link>https://db.gcve.eu/sighting/344d03da-b95f-47b1-8c8e-682f05c650b7/export</link>
      <description>{"uuid": "344d03da-b95f-47b1-8c8e-682f05c650b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28136", "type": "seen", "source": "https://t.me/cibsecurity/17357", "content": "\u203c CVE-2020-28136 \u203c\n\nAn Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:20.000000Z"}</description>
      <content:encoded>{"uuid": "344d03da-b95f-47b1-8c8e-682f05c650b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28136", "type": "seen", "source": "https://t.me/cibsecurity/17357", "content": "\u203c CVE-2020-28136 \u203c\n\nAn Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T04:25:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/344d03da-b95f-47b1-8c8e-682f05c650b7/export</guid>
      <pubDate>Wed, 09 Dec 2020 04:25:20 +0000</pubDate>
    </item>
    <item>
      <title>a235765c-5b7e-4a60-98d9-bc73fb61c1f2</title>
      <link>https://db.gcve.eu/sighting/a235765c-5b7e-4a60-98d9-bc73fb61c1f2/export</link>
      <description>{"uuid": "a235765c-5b7e-4a60-98d9-bc73fb61c1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28137", "type": "seen", "source": "https://t.me/cibsecurity/32196", "content": "\u203c CVE-2020-28137 \u203c\n\nCross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-10T20:36:48.000000Z"}</description>
      <content:encoded>{"uuid": "a235765c-5b7e-4a60-98d9-bc73fb61c1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28137", "type": "seen", "source": "https://t.me/cibsecurity/32196", "content": "\u203c CVE-2020-28137 \u203c\n\nCross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-10T20:36:48.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a235765c-5b7e-4a60-98d9-bc73fb61c1f2/export</guid>
      <pubDate>Wed, 10 Nov 2021 20:36:48 +0000</pubDate>
    </item>
  </channel>
</rss>
