Lucene search
K

34 matches found

NVD
NVD
added 2026/04/30 1:16 a.m.1 views

CVE-2026-7447

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/updatecustomer.php. This manipulation of the argument type/length/business parameter validity causes sql injection. The attack is possible to be carried out...

6.5CVSS0.00246EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/29 3:45 p.m.1 views

CVE-2026-7390 SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is no...

5.1CVSS3.5AI score0.00195EPSS
Exploits0References5
EUVD
EUVD
added 2025/11/03 6:31 p.m.2 views

EUVD-2025-37496

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS5.7AI score0.00227EPSS
Exploits1References2
NVD
NVD
added 2025/11/03 4:15 p.m.3 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS0.00227EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/11/03 12:0 a.m.7 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

0.00227EPSS
Exploits1References1
CVE
CVE
added 2025/11/03 12:0 a.m.9 views

CVE-2025-63447

Water Management System v1.0 is affected by a Cross Site Scripting (XSS) vulnerability in the /add_customer.php endpoint. The issue is documented across multiple sources (NVD, Red Hat, EUVD, CIRCL, CVE list, CNNVD) and is generally described as an XSS in that endpoint. The root cause is not expli...

6.1CVSS5.8AI score0.00227EPSS
Exploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.2 views

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

9.4CVSS8AI score0.00347EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.3 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /customer/index.php, which could lead to a SQL injection...

8.8CVSS6.9AI score0.00304EPSS
Exploits1References5
NVD
NVD
added 2025/10/08 10:15 a.m.4 views

CVE-2025-11469

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...

9.8CVSS0.00316EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.3 views

PT-2025-41242

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. Manipulation of the Contact argument in an unknown function within the /pages/save customer.php fil...

9.8CVSS6.5AI score0.00316EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/10/07 11:23 a.m.3 views

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.5AI score0.0024EPSS
Exploits0References1
CVE
CVE
added 2025/10/06 11:2 a.m.9 views

CVE-2025-11333

CVE-2025-11333 affects langleyfcu Online Banking System up to version 57437e6400ce0ae240e692c24e6346b8d0c17d7a, specifically the Add Customer Page file /customer_add_action.php. The vulnerability arises from manipulation of the First Name parameter, causing cross-site scripting. Remote exploitati...

4.8CVSS5.2AI score0.0024EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/06 11:2 a.m.1 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.2AI score0.0024EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/06 11:2 a.m.9 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS0.0024EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.1 views

Langley Online Banking System 代码注入漏洞

Langley Online Banking System is an online banking system from Langley Corporation. A code injection vulnerability exists in the Langley Online Banking System that originates from an incorrect manipulation of the First Name parameter in the file /customeraddaction.php in the Add Customer Page...

4.8CVSS4AI score0.0024EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.2 views

PT-2025-40890

Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a Description A security issue exists in the langleyfcu Online Banking System. The manipulation of the First Name argument in the /customer add action.ph...

4.8CVSS2.5AI score0.0024EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-32976

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00402EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30810

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00343EPSS
Exploits1References7
NVD
NVD
added 2025/09/22 4:15 p.m.3 views

CVE-2025-10804

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploi...

8.8CVSS0.00343EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.3 views

Code-Projects Simple Pizza Ordering System 安全漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /editcus.php. An attacker can exploit this vulnerabilit...

9.8CVSS8.2AI score0.00448EPSS
Exploits1References6
Rows per page
Query Builder