Lucene search
+L

60 matches found

OSV
OSV
added 2025/03/03 9:15 a.m.6 views

CVE-2025-1858

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

9.8CVSS5.8AI score0.00554EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/03/03 8:31 a.m.31 views

CVE-2025-1858 Codezips Online Shopping Website success.php sql injection

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

7.5CVSS0.00554EPSS
Exploits1References4
CVE
CVE
added 2025/03/03 8:31 a.m.52 views

CVE-2025-1858

Consolidated details from multiple sources confirm CVE-2025-1858 affects Codezips Online Shopping Website 1.0, with a SQL injection in the /success.php file triggered by manipulating the id parameter. Exploitation can be performed remotely, and public disclosures exist. No patch/version details o...

9.8CVSS7.6AI score0.00554EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/03 8:31 a.m.12 views

CVE-2025-1858 Codezips Online Shopping Website success.php sql injection

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

7.5CVSS7.6AI score0.00554EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/02/05 5:13 a.m.15 views

CVE-2024-10509

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7.4AI score0.00784EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:42 a.m.6 views

CVE-2024-9460

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS7.4AI score0.00692EPSS
Exploits0References1
NVD
NVD
added 2024/11/08 6:15 a.m.11 views

CVE-2024-10994

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched...

8.8CVSS0.00647EPSS
Exploits1References4
NVD
NVD
added 2024/11/08 6:15 a.m.9 views

CVE-2024-10993

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

8.8CVSS0.00703EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/11/08 5:31 a.m.23 views

CVE-2024-10993 Codezips Online Institute Management System manage_website.php unrestricted upload

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

6.5CVSS0.00703EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/08 5:31 a.m.10 views

CVE-2024-10993 Codezips Online Institute Management System manage_website.php unrestricted upload

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

6.5CVSS6.5AI score0.00703EPSS
Exploits1References4
CVE
CVE
added 2024/11/08 5:31 a.m.43 views

CVE-2024-10993

Codezips Online Institute Management System 1.0 is affected by CVE-2024-10993 due to an issue in the website_image parameter of /manage_website.php, which allows unrestricted upload. The vulnerability enables remote exploitation and the exploit has been disclosed publicly. Technical details acros...

8.8CVSS6.8AI score0.00703EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/07 12:0 a.m.8 views

PT-2024-16685 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage website.php. The manipulation of the website image argument leads to unrestricted...

8.8CVSS7.4AI score0.00703EPSS
Exploits1References9
OSV
OSV
added 2024/11/04 4:15 p.m.6 views

CVE-2024-10764

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

9.8CVSS5.5AI score0.00519EPSS
Exploits1References4
NVD
NVD
added 2024/11/04 4:15 p.m.13 views

CVE-2024-10764

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

9.8CVSS0.00519EPSS
Exploits1References4
OSV
OSV
added 2024/11/04 4:15 p.m.6 views

CVE-2024-10765

A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument oldimage leads to unrestricted upload. The attack can be initiated remotely. The exploit ha...

9.8CVSS5.5AI score0.00519EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/04 3:31 p.m.15 views

CVE-2024-10764 Codezips Online Institute Management System save_user.php unrestricted upload

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

6.5CVSS6.5AI score0.00519EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/11/04 3:31 p.m.21 views

CVE-2024-10764 Codezips Online Institute Management System save_user.php unrestricted upload

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

6.5CVSS0.00519EPSS
Exploits1References4
CVE
CVE
added 2024/11/04 3:31 p.m.58 views

CVE-2024-10764

Codezips Online Institute Management System 1.0 contains a critical vulnerability in /pages/save_user.php where manipulating the image parameter enables unrestricted file upload. The issue is remotely exploitable and has been publicly disclosed. Reported details consistently identify the vulnerab...

9.8CVSS6.8AI score0.00519EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.3 views

Codezips Online Institute Management System 安全漏洞

Codezips Online Institute Management System is an open source online institute management system from Codezips. A security vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from mishandling of the parameter oldimage, resulting in unrestricted uploads...

9.8CVSS6.6AI score0.00519EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.3 views

PT-2024-16527 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System versions up to 1.0 Description: A critical vulnerability was found in the Codezips Online Institute Management System. This issue affects unknown code of the file /profile.php. The manipulation of t...

9.8CVSS7.3AI score0.00519EPSS
Exploits1References11
Rows per page
Query Builder