Lucene search
+L

133 matches found

RedhatCVE
RedhatCVE
•added 2025/05/21 8:16 a.m.•22 views

CVE-2025-4923

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /userdeliveryupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attac...

7.5CVSS6.9AI score0.00533EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/21 5:02 a.m.•43 views

CVE-2025-4909

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS6.8AI score0.00562EPSS
SaveExploits1
osv_cve
osv_cve
•added 2025/05/20 10:15 p.m.•21 views

CVE-2025-5002

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userproposalupdateorder.php. The manipulation of the argument orderid leads to sql injection. It is possible to initiate the attack...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/20 10:00 p.m.•101 views

CVE-2025-5002

CVE-2025-5002 affects SourceCodester Client Database Management System 1.0. The vulnerability resides in /user_proposal_update_order.php, where manipulating the order_id parameter enables SQL injection. The issue is exploitable remotely and exploitation has been disclosed publicly. The public rec...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/20 12:00 a.m.•31 views

PT-2025-22312 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the SourceCodester Client Database Management System. This affects an unknown part of the file /user proposal update order.php. The...

9.8CVSS6.8AI score0.00562EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/20 12:00 a.m.•10 views

CVE-2025-5002: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userproposalupdateorder.php. The manipulation of the argument orderid leads to sql injection. It is possible to initiate the attack...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/20 12:00 a.m.•25 views

SourceCodester Client Database Management System Injection Vulnerability

SourceCodester Client Database Management System is SourceCodester open source a client database management system . SourceCodester Client Database Management System version 1.0 has an injection vulnerability, the vulnerability stems from the file /userproposalupdateorder.php improper handling of...

9.8CVSS7.1AI score0.00562EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/19 8:00 a.m.•49 views

CVE-2025-4923 SourceCodester Client Database Management System user_delivery_update.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /userdeliveryupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attac...

7.5CVSS0.00533EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/19 8:00 a.m.•62 views

CVE-2025-4923

CVE-2025-4923 affects SourceCodester Client Database Management System 1.0. The issue is an unrestricted file upload via the parameter uploaded_file_cancelled in the file /user_delivery_update.php, allowing remote exploit. The vulnerability is reported across multiple sources and the exploit has ...

7.5CVSS6.9AI score0.00533EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/05/19 4:15 a.m.•39 views

CVE-2025-4909

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS0.00562EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/19 3:31 a.m.•47 views

CVE-2025-4909 SourceCodester Client Database Management System exposure of information through directory listing

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS0.00562EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/19 3:31 a.m.•22 views

CVE-2025-4909 SourceCodester Client Database Management System exposure of information through directory listing

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS6.7AI score0.00562EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•27 views

PT-2025-21878 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the software, affecting unknown code and leading to exposure of information through directory listing. The attack can be initiated remotel...

7.5CVSS7AI score0.00562EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•10 views

CVE-2025-4923: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /userdeliveryupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attac...

7.5CVSS6.9AI score0.00533EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•10 views

CVE-2025-4909: Exposure of Information Through Directory Listing

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

7.5CVSS6.8AI score0.00562EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•12 views

CVE-2025-4924: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /uservoidtransaction.php. The manipulation of the argument orderid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS7AI score0.00525EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•23 views

SourceCodester Client Database Management System security vulnerabilities

SourceCodester Client Database Management System is an open source client database management system from SourceCodester. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from a directory listing that leads to information disclosure...

7.5CVSS7.2AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•24 views

SourceCodester Client Database Management System Injection Vulnerability

SourceCodester Client Database Management System is SourceCodester open source a client database management system . SourceCodester Client Database Management System version 1.0 has an injection vulnerability, the vulnerability stems from the operation of the parameter orderid in the file...

9.8CVSS7.1AI score0.00525EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/11 12:15 a.m.•37 views

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

9.8CVSS5.9AI score0.00418EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/11 12:15 a.m.•42 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

9.8CVSS5.9AI score0.00418EPSS
SaveExploits0References1
Rows per page
Query Builder