Lucene search
K

19169 matches found

Cvelist
Cvelist
added 2025/11/17 7:32 p.m.7 views

CVE-2025-13298 itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now publ...

7.5CVSS0.00363EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 7:32 p.m.13 views

CVE-2025-13298

The CVE-2025-13298 entry concerns itsourcecode Web-Based Internet Laboratory Management System 1.0. A SQL injection exists in the /enrollment/controller.php file arising from insufficient input validation, enabling remote manipulation and illegal SQL execution. Multiple connected sources (CNVD, N...

9.8CVSS7.2AI score0.00363EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/11/17 6:15 p.m.2 views

CVE-2025-13297

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS0.00339EPSS
Exploits1References5
OSV
OSV
added 2025/11/17 6:15 p.m.3 views

CVE-2025-13297

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS5.7AI score0.00339EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/17 6:2 p.m.8 views

CVE-2025-13297 itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00339EPSS
Exploits1References5
EUVD
EUVD
added 2025/11/17 6:2 p.m.4 views

EUVD-2025-197857

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7.2AI score0.00339EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/11/17 6:2 p.m.4 views

CVE-2025-13297 itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7.3AI score0.00339EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 6:2 p.m.15 views

CVE-2025-13297

The CVE-2025-13297 entry concerns itsourcecode Web-Based Internet Laboratory Management System 1.0. The vulnerability is a SQL injection in the controller.php file under /course/controller.php caused by insufficient validation of externally entered SQL statements. It is exploitable remotely and, ...

9.8CVSS7.3AI score0.00339EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/17 5:21 p.m.6 views

CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

6.9CVSS0.00348EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2025/11/17 9:52 a.m.2 views

kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue

A flaw was discovered in the Bluetooth subsystem of the Linux kernel. When processing a HCIEVNUMCOMPPKTS event, the function hciconntxdequeue did not properly hold or release the hdev device lock, which may lead to a use-after-free of the connection structure...

5.8AI score0.0017EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/11/17 9:7 a.m.14 views

CVE-2025-13209

A weakness has been identified in bestfeng oagitfree up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. This manipulation of the argument writeProp causes xml external entity...

6.5CVSS6.7AI score0.00255EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/17 5:3 a.m.3 views

CVE-2025-64329

A flaw was found in containerd. This vulnerability allows a user to exhaust memory on the host due to goroutine leaks via a bug in the CRI Container Runtime Interface Attach implementation...

6.9CVSS5AI score0.00151EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.5 views

PT-2025-47206

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A flaw exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0 that allows for SQL injection. The issue is located in an unknown...

7.5CVSS7.1AI score0.00339EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.4 views

itsourcecode Web-Based Internet Laboratory SQL注入漏洞

Web-Based Internet Laboratory Management System is a web laboratory software. A SQL injection vulnerability exists in Web-Based Internet Laboratory Management System, which originates from a lack of validation of externally entered SQL statements in the file /settings/controller.php. An attacker...

9.8CVSS7.8AI score0.00339EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.4 views

PT-2025-47208

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A SQL injection issue exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0. The issue is located in an unknown functionality of...

7.5CVSS7.2AI score0.00339EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.5 views

PT-2025-47201

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A flaw exists in itsourcecode Web-Based Internet Laboratory Management System 1.0 that allows for SQL injection. The issue is located in the file...

7.5CVSS7AI score0.00363EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.7 views

PT-2025-47191

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A security issue exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0. The issue involves a SQL injection impacting an unknown...

7.5CVSS7.2AI score0.00339EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.5 views

PT-2025-47203

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A flaw exists in itsourcecode Web-Based Internet Laboratory Management System 1.0. The issue impacts an unknown function within the /user/controller.php file...

7.5CVSS6.8AI score0.00339EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.3 views

itsourcecode Web-Based Internet Laboratory SQL注入漏洞

Web-Based Internet Laboratory Management System is a web laboratory software. The Web-Based Internet Laboratory Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the file /course/controller.php. An attacker...

9.8CVSS7.9AI score0.00339EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.3 views

itsourcecode Web-Based Internet Laboratory SQL注入漏洞

Web-Based Internet Laboratory Management System is a web laboratory software. A SQL injection vulnerability exists in Web-Based Internet Laboratory Management System, which originates from a lack of validation of externally entered SQL statements in the file /enrollment/controller.php. An attacke...

9.8CVSS7.9AI score0.00363EPSS
Exploits1References6
Rows per page
Query Builder