Lucene search
+L

255 matches found

CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•16 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•3 views

CVE-2025-14832: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/15 9:34 a.m.•19 views

CVE-2025-14652

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/15 8:10 a.m.•22 views

CVE-2025-14650

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

9.8CVSS6.8AI score0.00401EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/15 7:35 a.m.•20 views

CVE-2025-14649

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/14 9:30 a.m.•17 views

EUVD-2025-203291

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

7.5CVSS6.4AI score0.00401EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/14 9:30 a.m.•13 views

EUVD-2025-203292

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/12/14 9:30 a.m.•15 views

EUVD-2025-203287

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
OSV
OSV
•added 2025/12/14 9:15 a.m.•13 views

CVE-2025-14652

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 9:15 a.m.•15 views

CVE-2025-14652

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/14 9:02 a.m.•44 views

CVE-2025-14652 itsourcecode Online Cake Ordering System admindetail.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/14 9:02 a.m.•27 views

CVE-2025-14652

CVE-2025-14652 affects itsourcecode Online Cake Ordering System 1.0. A SQL injection vulnerability exists in the /admindetail.php?action=edit endpoint via manipulation of the ID parameter. Exploitation is remote and the exploit has been publicly disclosed. Impact per sources includes confidential...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/14 9:02 a.m.•7 views

CVE-2025-14652 itsourcecode Online Cake Ordering System admindetail.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/14 8:15 a.m.•14 views

CVE-2025-14650

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

9.8CVSS5.8AI score0.00401EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 8:15 a.m.•15 views

CVE-2025-14650

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

9.8CVSS0.00401EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 8:15 a.m.•18 views

CVE-2025-14649

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

9.8CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/14 8:15 a.m.•17 views

CVE-2025-14649

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/14 8:02 a.m.•8 views

CVE-2025-14650 itsourcecode Online Cake Ordering System product.php sql injection

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

7.5CVSS7AI score0.00401EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/14 8:02 a.m.•30 views

CVE-2025-14650

CVE-2025-14650 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability is a SQL injection in the /cakeshop/product.php file, triggered by manipulating the Product argument. It is exploitable remotely and exploits have been published. Remediation is not explicitly detailed in the p...

9.8CVSS7AI score0.00401EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/14 8:02 a.m.•46 views

CVE-2025-14650 itsourcecode Online Cake Ordering System product.php sql injection

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

7.5CVSS0.00401EPSS
SaveExploits1References5
Rows per page
Query Builder