CVE-2025-4313 SourceCodester Advanced Web Store admin_addnew_product.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/adminaddnewproduct.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4312

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4312

SourceCodester Advanced Web Store 1.0 contains a SQL injection vulnerability in /productdetail.php via the prodid parameter. The issue allows remote initiation and has been disclosed publicly. Exploitation details are provided across multiple sources (e.g., CVE-2025-4312, Red Hat advisory, PT Sec...

CVE-2025-4312 SourceCodester Advanced Web Store productdetail.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4312 SourceCodester Advanced Web Store productdetail.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4314: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4312: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-4313: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/adminaddnewproduct.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The...

PT-2025-19831 · Sourcecodester · Sourcecodester Advanced Web Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced Web Store version 1.0 Description: A critical issue has been found in the processing of the file /productdetail.php. The manipulation of the prodid argument leads to SQL injection. The attack may be initiated remotely...

SourceCodester Advanced Web Store Injection Vulnerability

SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. An injection vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter txtLogin in the file /admin/index.php, which could lead to an SQL...

SourceCodester Advanced Web Store security vulnerabilities

SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. A security vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter txtProdId in the file /admin/adminaddnewproduct.php, which could lead to ...

CVE-2025-4188

The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'reorder-simple-image-text-slider-setting' page. This makes it possible for unauthenticate...

CVE-2025-4175

A vulnerability, which was classified as critical, was found in AlanBinu007 Spring-Boot-Advanced-Projects up to 3.1.3. This affects the function uploadUserProfileImage of the file...

CVE-2025-4188

The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'reorder-simple-image-text-slider-setting' page. This makes it possible for unauthenticate...

CVE-2025-4188: Cross-Site Request Forgery (CSRF)

The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'reorder-simple-image-text-slider-setting' page. This makes it possible for unauthenticate...

PT-2025-18933 · WordPress · Advanced Reorder Image Text Slider

Name of the Vulnerable Software and Affected Versions: Advanced Reorder Image Text Slider plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the...

WordPress plugin Advanced Reorder Image Text Slider has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

NCSC Guidance on “Advanced Cryptography”

The UK's National Cyber Security Centre just released its white paper on "Advanced Cryptography," which it defines as "cryptographic techniques for processing encrypted data, providing enhanced functionality over and above that provided by traditional cryptography." It includes things like...

Malware in example-advanced

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the amd display driver setting the DRR register during pipeline commit, which could lead to an underflow...