Lucene search
+L

14042 matches found

Cvelist
Cvelist
•added 2025/11/17 1:32 a.m.•39 views

CVE-2025-13257 itsourcecode Inventory Management System index.php sql injection

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has be...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/17 1:32 a.m.•8 views

CVE-2025-13257 itsourcecode Inventory Management System index.php sql injection

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has be...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•24 views

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from an incorrect manipulation of the parameter ID in the file /admin/user/index.php?view=edit, which...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•7 views

CVE-2025-62519: Improper Neutralization of Special Elements used in an SQL Command

phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability in the main configuration update functionality of phpMyFAQ allows a privileged user with 'Configuration Edit' permissions to execute arbitrary SQL commands. Successful exploitatio...

7.2CVSS6.9AI score0.00744EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•21 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /manufacturer/editunit.php, which could lead ...

8.8CVSS6.9AI score0.0031EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•19 views

PT-2025-47211

Name of the Vulnerable Software and Affected Versions Courier Management System version 1.0 Description A SQL injection issue exists in the file /search-edit.php due to manipulation of the Consignment argument. This manipulation can be initiated remotely. The exploit has been publicly disclosed...

6.5CVSS7.2AI score0.00367EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

Code-Projects Courier Management System SQL注入漏洞

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Consignment in the file /search-edit.php. An attacker can exploit this...

9.8CVSS7.1AI score0.00367EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•9 views

CVE-2025-13257: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•19 views

PT-2025-47107

A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.8AI score0.0031EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•22 views

PT-2025-47108

A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to...

6.5CVSS7AI score0.0031EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•33 views

PT-2025-47104

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A security issue has been identified in itsourcecode Inventory Management System version 1.0. The issue involves a SQL injection vulnerability present in an unknown function with...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•16 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter cmbProductUnit in the file /manufacturer/editproduct.php,...

8.8CVSS7AI score0.0031EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/11/16 9:15 a.m.•19 views

CVE-2025-13245

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.4CVSS4.2AI score0.00257EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/16 9:02 a.m.•27 views

EUVD-2025-197723

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.1CVSS3.6AI score0.00257EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/11/16 9:02 a.m.•35 views

CVE-2025-13245 code-projects Student Information System editprofile.php cross site scripting

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.1CVSS0.00257EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 8:02 a.m.•40 views

CVE-2025-13243

CVE-2025-13243 affects code-projects Student Information System 2.0. The vulnerable component is the /editprofile.php file, in an unknown function, where input is not properly filtered, leading to a SQL injection. The vulnerability is exploitable remotely, and the exploit has been publicly releas...

8.8CVSS6.3AI score0.00351EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/11/16 6:31 a.m.•23 views

EUVD-2025-197717

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

6.5CVSS6.1AI score0.00317EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/16 6:31 a.m.•25 views

EUVD-2025-197714

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS6.6AI score0.00323EPSS
SaveExploits1References6
NVD
NVD
•added 2025/11/16 6:15 a.m.•23 views

CVE-2025-13238

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

8.8CVSS0.00317EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/11/16 6:15 a.m.•21 views

CVE-2025-13238

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

8.8CVSS5.4AI score0.00317EPSS
SaveExploits1References4
Rows per page
Query Builder