Lucene search
+L

36 matches found

NVD
NVD
•added 2026/04/30 1:16 a.m.•18 views

CVE-2026-7447

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/updatecustomer.php. This manipulation of the argument type/length/business parameter validity causes sql injection. The attack is possible to be carried out...

6.5CVSS0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/29 3:45 p.m.•8 views

CVE-2026-7390 SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is no...

5.1CVSS3.9AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/11/03 6:31 p.m.•15 views

EUVD-2025-37496

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS5.7AI score0.00297EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/03 4:15 p.m.•20 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS0.00297EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/03 12:00 a.m.•31 views

CVE-2025-63447

The Water Management System v1.0 , an inventory management system developed by Dikshant Naik, is vulnerable to Cross-Site Scripting (XSS) . The root cause is a failure to properly neutralize input within the /add_customer.php endpoint. This vulnerability allows an attacker to inject malicious scr...

6.1CVSS5.8AI score0.00297EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/11/03 12:00 a.m.•26 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

0.00297EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/10 1:32 a.m.•17 views

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

9.4CVSS8AI score0.00381EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•19 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /customer/index.php, which could lead to a SQL injection...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/08 10:15 a.m.•16 views

CVE-2025-11469

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...

9.8CVSS0.0035EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•15 views

PT-2025-41242

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. Manipulation of the Contact argument in an unknown function within the /pages/save customer.php fil...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/10/07 11:23 a.m.•11 views

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.5AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/06 11:02 a.m.•24 views

CVE-2025-11333

CVE-2025-11333 affects langleyfcu Online Banking System up to version 57437e6400ce0ae240e692c24e6346b8d0c17d7a, specifically the Add Customer Page file /customer_add_action.php. The vulnerability arises from manipulation of the First Name parameter, causing cross-site scripting. Remote exploitati...

4.8CVSS5.2AI score0.00267EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/06 11:02 a.m.•35 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS0.00267EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/06 11:02 a.m.•3 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.2AI score0.00267EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•10 views

PT-2025-40890

Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a Description A security issue exists in the langleyfcu Online Banking System. The manipulation of the First Name argument in the /customer add action.ph...

4.8CVSS2.5AI score0.00267EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•2 views

CVE-2025-11333: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS4AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•12 views

Langley Online Banking System 代码注入漏洞

Langley Online Banking System is an online banking system from Langley Corporation. A code injection vulnerability exists in the Langley Online Banking System that originates from an incorrect manipulation of the First Name parameter in the file /customeraddaction.php in the Add Customer Page...

4.8CVSS4AI score0.00267EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-30810

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00381EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-32976

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00438EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/22 4:15 p.m.•17 views

CVE-2025-10804

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploi...

8.8CVSS0.00381EPSS
SaveExploits1References5
Rows per page
Query Builder