CVE-2025-10413

creationtimestamp| type| source ---|---|--- 2025-09-14 23:21:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytgmgp6j62m 2025-09-15 06:20:11+00:00| seen| https://gist.github.com/Darkcrai86/9b46ddcbb079517c33040ecca9c28ffd...

CVE-2025-10413

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10413

CVE-2025-10413 affects Campcodes Grocery Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file /ajax.php?action=delete_customer, triggered by manipulating the ID parameter. This can be exploited remotely, and public disclosures exist. Connected sources confirm the issu...

CVE-2019-10413

Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system...

CVE-2024-10413

creationtimestamp| type| source ---|---|--- 2024-10-27 11:43:22+00:00| seen| https://t.me/cvedetector/9052 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:32+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-10413

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched...

CVE-2024-10413 SourceCodester Online Hotel Reservation System update.php upload unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched...

CVE-2020-10413

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/import-html.php by adding a question mark ? followed by the payload...

CVE-2020-10413

CVE-2020-10413 affects Chadha PHPKB Standard Multi-Language 9. The Red Hat advisories document the same root cause: URI handling in admin/header.php enables Reflected XSS by appending a question mark and payload, with affected admin pages including import-html.php (per CVE description) and relate...

CVE-2019-10413

CVE-2019-10413 affects the Jenkins Data Theorem: CI/CD Plugin (versions 1.3 and earlier). The vulnerability stems from credentials being stored unencrypted in job config.xml on the Jenkins master, potentially viewable by users with Extended Read permission or via access to the master filesystem. ...

CVE-2019-10413

Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system...

CVE-2016-10413

...

CVE-2016-10413

CVE-2016-10413 entry is rejected/not used; does not represent an active vulnerability.

CVE-2017-10413

The CVE-2017-10413 issue affects Oracle E-Business Suite’s Mobile Field Service component (Multiplatform Based on HTML5). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.7. An unauthenticated attacker with network access over HTTP can compromise Oracle Mobile Field Service; attacks ...

Fedora Update for bugzilla FEDORA-2011-10413

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2011-10413 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...