Lucene search
K

113 matches found

CNNVD
CNNVD
added 2025/11/10 12:0 a.m.3 views

SourceCodester Client Database Management System 安全漏洞

SourceCodester Client Database Management System is an open source client database management system from SourceCodester. A security vulnerability exists in the SourceCodester Client Database Management System version 1.0, which stems from a lack of authentication and authorization checks and...

7.1CVSS6.9AI score0.00174EPSS
Exploits1References3
CVE
CVE
added 2025/11/10 12:0 a.m.12 views

CVE-2025-63711

CVE-2025-63711 is a CSRF vulnerability affecting SourceCodester Client Database Management System 1.0. The issue: the user deletion endpoint (e.g., superadmin_user_delete.php) accepts POST with user_id and lacks request origin checks, anti-CSRF tokens, and proper authentication/authorization. An ...

7.1CVSS6.6AI score0.00174EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-14173

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00352EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-14182

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00352EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-14176

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00438EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-14167

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00607EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-15671

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00398EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2025-14183

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00977EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-15986

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References7
OSV
OSV
added 2025/06/17 5:15 a.m.1 views

CVE-2025-6160

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

9.8CVSS5.8AI score0.00502EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/17 4:31 a.m.17 views

CVE-2025-6160 SourceCodester Client Database Management System user_customer_create_order.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

7.5CVSS0.00502EPSS
Exploits1References5
CVE
CVE
added 2025/06/17 4:31 a.m.26 views

CVE-2025-6160

CVE-2025-6160 affects SourceCodester Client Database Management System 1.0. Affects the file /user_customer_create_order.php where manipulation of the user_id parameter enables a SQL injection. The issue can be exploited remotely and, per sources, the exploit has been disclosed publicly. Public m...

9.8CVSS7.5AI score0.00502EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.2 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the paramete...

9.8CVSS7.8AI score0.00502EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/06/17 12:0 a.m.5 views

PT-2025-25618

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A critical issue has been found in the software, affecting the processing of the file /user customer create order.php. The manipulation of the user id argument leads to S...

9.8CVSS6.8AI score0.00502EPSS
Exploits1References13
RedhatCVE
RedhatCVE
added 2025/06/09 6:9 p.m.6 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.1AI score0.00378EPSS
Exploits2References1
NVD
NVD
added 2025/06/07 6:15 p.m.10 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS0.00378EPSS
Exploits2References5
Vulnrichment
Vulnrichment
added 2025/06/07 6:0 p.m.7 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.2AI score0.00378EPSS
Exploits2References5
CVE
CVE
added 2025/06/07 6:0 p.m.67 views

CVE-2025-5840

SourceCodester Client Database Management System 1.0 contains a vulnerability in the file /user_update_customer_order.php where the uploaded_file parameter can be manipulated to achieve unrestricted file upload. This remote-access flaw could allow an attacker to upload arbitrary files, potentiall...

7.5CVSS7.2AI score0.00378EPSS
Exploits2References5Affected Software1
CNNVD
CNNVD
added 2025/06/07 12:0 a.m.2 views

SourceCodester Client Database Management System 代码问题漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which is caused by incorrect manipulation of the parameter uploadedfile in the fil...

7.5CVSS7.4AI score0.00378EPSS
Exploits2References6
RedhatCVE
RedhatCVE
added 2025/05/30 12:49 p.m.13 views

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS7.1AI score0.00513EPSS
Exploits1References1
Rows per page
Query Builder