Lucene search
+L

744 matches found

OSV
OSV
added 2025/05/09 4:15 p.m.8 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

9.8CVSS6AI score0.00499EPSS
SaveExploits1References2
NVD
NVD
added 2025/05/09 4:15 p.m.24 views

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

9.8CVSS0.00643EPSS
SaveExploits1References2
NVD
NVD
added 2025/05/09 4:15 p.m.18 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

9.8CVSS0.00499EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.12 views

PT-2025-20582

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue within the user payment update.php file. The issue occurs through the order id POST parameter. The vulnerability allo...

9.8CVSS7.5AI score0.00401EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.37 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

0.00401EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/09 12:00 a.m.70 views

CVE-2025-46190

CVE-2025-46190 affects SourceCodester Client Database Management System 1.0, with a SQL Injection vulnerability in the file user_delivery_update.php exploitable via the POST parameter order_id . The CVE has a high impact (CVSS 3.1: 9.8, CRITICAL) with network attack vector, no privileges required...

9.8CVSS8.1AI score0.00401EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.8 views

PT-2025-20576

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...

9.8CVSS7.5AI score0.00499EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.26 views

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

0.00401EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.23 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

0.00499EPSS
SaveExploits1References2
CVE
CVE
added 2025/05/09 12:00 a.m.80 views

CVE-2025-46192

CVE-2025-46192 affects SourceCodester Client Database Management System 1.0. Vulnerable component: user_payment_update.php, where SQL injection is possible via the order_id POST parameter due to improper input handling. Impact per CVSS: high confidentiality, integrity, and availability; overall c...

9.8CVSS8.3AI score0.00401EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2025/05/09 12:00 a.m.65 views

CVE-2025-46193

Summary: CVE-2025-46193 affects SourceCodester Client Database Management System 1.0 and enables remote code execution via an arbitrary file upload in the vulnerable file path user_proposal_update_order.php. The CVSS v3.1 score is 9.8 (CRITICAL) with network attack vector, no privileges required,...

9.8CVSS7.8AI score0.00704EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2025/05/09 12:00 a.m.71 views

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in the superadmin_phpmyadmin.php file. The root cause is insufficient input validation in the affected file, enabling high-impact access to confidential data, potential manipulation, and disruption (CVSS 3.1 base ...

9.8CVSS7.9AI score0.00643EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2025/05/09 12:00 a.m.74 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is affected by a SQL Injection in user_order_customer_update.php via the order_id POST parameter. Root cause: improper handling/validation of the order_id parameter. Impact: potential unauthorized access/modification of the database (per CVSS 3...

9.8CVSS8.3AI score0.00499EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/09 12:00 a.m.10 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

7.6AI score0.00401EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/09 12:00 a.m.8 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

7.6AI score0.00499EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/05/09 12:00 a.m.8 views

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

7.6AI score0.00643EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/05/09 12:00 a.m.13 views

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

7.6AI score0.00401EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.7 views

PT-2025-20577

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to a SQL Injection issue in the 'user delivery update.php' file. The issue is triggered throug...

9.8CVSS7.4AI score0.00401EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.10 views

SourceCodester Client Database Management System 安全漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

9.8CVSS7.8AI score0.00401EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/09 12:00 a.m.9 views

CVE-2025-46193

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...

7.5AI score0.00704EPSS
SaveExploits0References2
Rows per page
Query Builder