CVE-2025-10117 SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

CVE-2025-10117 SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

Mobile Shop Management System AddNewProduct.php file code problem vulnerability

Mobile Shop Management System is a store management system. Mobile Shop Management System has a code issue vulnerability that stems from the lack of valid validation of uploaded files in the parameter ProductImage in the file AddNewProduct.php. An attacker can exploit this vulnerability to upload...

CVE-2025-9841

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit...

CVE-2025-9841

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit...

Mobile Shop Management System 代码问题漏洞

Mobile Shop Management System is a store management system. Mobile Shop Management System has a code issue vulnerability that stems from the lack of valid validation of uploaded files in the parameter ProductImage in the file AddNewProduct.php. An attacker can exploit this vulnerability to upload...

CVE-2025-9841 code-projects Mobile Shop Management System AddNewProduct.php unrestricted upload

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit...

CVE-2025-9841

The CVE-2025-9841 vulnerability affects code-projects Mobile Shop Management System 1.0, specifically AddNewProduct.php. It permits unrestricted upload by manipulating the ProductImage parameter, enabling remote exploitation. Multiple connected sources describe the issue consistently, citing that...

CVE-2025-9841 code-projects Mobile Shop Management System AddNewProduct.php unrestricted upload

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit...

CVE-2025-50583

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50584

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Course module and may lead to cross-site scripting attacks...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Teacher module and could lead to a cross-site scripting attack...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Student module, and may lead to cross-site scripting attacks...

CVE-2025-6736: Improper Authorization

A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The...

CVE-2025-6736 juzaweb CMS Add New Themes Page install improper authorization

A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The...

CVE-2025-6736

CVE-2025-6736 affects Juzaweb CMS 3.4.2. The issue lies in the /admin-cp/theme/install endpoint of the Add New Themes Page, enabling improper authorization via a remote attack. The exploit has been publicly disclosed, and a PoC exists. Public vendor response is not documented here. CVSS details i...

PT-2025-27023 · Unknown · Juzawebcms

Name of the Vulnerable Software and Affected Versions: juzaweb CMS version 3.4.2 Description: A critical vulnerability was found in juzaweb CMS, affecting an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper...

CVE-2024-10530

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the addnewassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...