Lucene search
K

113 matches found

RedhatCVE
RedhatCVE
added 2025/05/28 10:47 p.m.20 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS7.3AI score0.00356EPSS
Exploits1References1
CVE
CVE
added 2025/05/28 12:0 p.m.53 views

CVE-2025-5299

CVE-2025-5299 affects SourceCodester Client Database Management System v1.0. The vulnerability is in the file /user_order_customer_update.php, where manipulating the argument uploaded_file_cancelled enables unrestricted file upload. Exploitation is possible remotely and exploits have been disclos...

7.5CVSS7.3AI score0.00513EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/05/28 12:0 a.m.2 views

SourceCodester Client Database Management System 代码问题漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which stems from improper handling of the uploadedfilecancelled parameter in the...

7.5CVSS7.6AI score0.00513EPSS
Exploits1References6
NVD
NVD
added 2025/05/26 10:15 p.m.10 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS0.00356EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/26 10:0 p.m.6 views

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

5.8CVSS7.3AI score0.00356EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/26 10:0 p.m.20 views

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

5.8CVSS0.00356EPSS
Exploits1References5
CVE
CVE
added 2025/05/26 10:0 p.m.57 views

CVE-2025-5207

CVE-2025-5207 affects SourceCodester Client Database Management System 1.0. The vulnerability is an SQL injection in the file /superadmin_update_profile.php triggered by manipulating the nickname/email parameters, potentially exploitable remotely. Multiple connected sources corroborate the issue’...

9.8CVSS5.2AI score0.00356EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.2 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

9.8CVSS5.7AI score0.00356EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.3 views

PT-2025-22937 · Unknown · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Client Database Management System. The issue affects an unknown functionality of the file /superadmin upda...

9.8CVSS5.4AI score0.00356EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/05/21 8:59 a.m.19 views

CVE-2025-4924

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /uservoidtransaction.php. The manipulation of the argument orderid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS7.7AI score0.00393EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/21 8:16 a.m.9 views

CVE-2025-4923

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /userdeliveryupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attac...

7.5CVSS7.2AI score0.00398EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/21 5:2 a.m.23 views

CVE-2025-4909

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS6.7AI score0.0042EPSS
Exploits1
OSV
OSV
added 2025/05/20 10:15 p.m.3 views

CVE-2025-5002

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userproposalupdateorder.php. The manipulation of the argument orderid leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.7AI score0.00421EPSS
Exploits1References5
CVE
CVE
added 2025/05/20 10:0 p.m.59 views

CVE-2025-5002

CVE-2025-5002 affects SourceCodester Client Database Management System 1.0. The vulnerability resides in /user_proposal_update_order.php, where manipulating the order_id parameter enables SQL injection. The issue is exploitable remotely and exploitation has been disclosed publicly. The public rec...

9.8CVSS7.6AI score0.00421EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/05/20 12:0 a.m.3 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . SourceCodester Client Database Management System version 1.0 has an injection vulnerability, the vulnerability stems from the file /userproposalupdateorder.php improper handling of...

9.8CVSS7.9AI score0.00421EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/20 12:0 a.m.7 views

PT-2025-22312 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the SourceCodester Client Database Management System. This affects an unknown part of the file /user proposal update order.php. The...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References11
Cvelist
Cvelist
added 2025/05/19 8:0 a.m.23 views

CVE-2025-4923 SourceCodester Client Database Management System user_delivery_update.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /userdeliveryupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attac...

7.5CVSS0.00398EPSS
Exploits1References5
CVE
CVE
added 2025/05/19 8:0 a.m.35 views

CVE-2025-4923

CVE-2025-4923 affects SourceCodester Client Database Management System 1.0. The issue is an unrestricted file upload via the parameter uploaded_file_cancelled in the file /user_delivery_update.php, allowing remote exploit. The vulnerability is reported across multiple sources and the exploit has ...

7.5CVSS7AI score0.00398EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/05/19 4:15 a.m.19 views

CVE-2025-4909

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS0.0042EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/19 3:31 a.m.10 views

CVE-2025-4909 SourceCodester Client Database Management System exposure of information through directory listing

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS7.2AI score0.0042EPSS
Exploits1References5
Rows per page
Query Builder