Lucene search
+L

1112 matches found

Positive Technologies
Positive Technologies
•added 2025/11/28 12:00 a.m.•26 views

PT-2025-48306

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

4.9CVSS6.9AI score0.00087EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/28 12:00 a.m.•17 views

PT-2025-48310

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

4.9CVSS6.9AI score0.0016EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/28 12:00 a.m.•3 views

CVE-2025-64312: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/28 12:00 a.m.•2 views

CVE-2025-58304: Undefined Security Weakness

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score0.00087EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/28 12:00 a.m.•3 views

CVE-2025-64315: Undefined Security Weakness

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...

7.1CVSS5.8AI score0.00089EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/28 12:00 a.m.•16 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS file management module, which can be exploited by an attacker to compromise service...

7.5CVSS6.6AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/28 12:00 a.m.•14 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS file management module, which can be exploited by an attacker to compromise service...

5.5CVSS6.6AI score0.00087EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/28 12:00 a.m.•13 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A configuration flaw vulnerability exists in Huawei HarmonyOS, which stems from a configuration flaw in the file management module, and can be exploited by a...

7.1CVSS6.5AI score0.00089EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/24 3:34 p.m.•24 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/23 6:30 p.m.•16 views

EUVD-2025-198575

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public and...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
NVD
NVD
•added 2025/11/23 4:15 p.m.•11 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/23 3:32 p.m.•6 views

CVE-2025-13555 Campcodes School File Management System Login index.php sql injection

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/23 3:32 p.m.•43 views

CVE-2025-13555

The CVE-2025-13555 affects Campcodes School File Management System 1.0, specifically the Login component’s /index.php where manipulating the stud_no parameter enables SQL injection. The root cause is an injectable query in the affected file that can be exploited remotely; public exploits exist. M...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/23 12:00 a.m.•2 views

CVE-2025-13555: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/23 12:00 a.m.•16 views

CampCodes School File Management System SQL注入漏洞

CampCodes School File Management System is a school file management system from CampCodes Philippines. A SQL injection vulnerability exists in Campcodes School File Management System version 1.0, which stems from the incorrect operation of the parameter studentno in the file /index.php, which may...

9.8CVSS7.9AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/23 12:00 a.m.•18 views

PT-2025-47847

Name of the Vulnerable Software and Affected Versions Campcodes School File Management System version 1.0 Description A flaw exists in Campcodes School File Management System that allows for SQL injection. The issue is located within the Login component, specifically in the /index.php file...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
•added 2025/11/22 12:23 a.m.•18 views

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.1AI score0.00371EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/21 12:15 a.m.•22 views

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00371EPSS
SaveExploits0References5
NVD
NVD
•added 2025/11/21 12:15 a.m.•18 views

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00371EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/11/21 12:02 a.m.•32 views

CVE-2025-13485 itsourcecode Online File Management System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00371EPSS
SaveExploits0References5
Rows per page
Query Builder