Lucene search
+L

215 matches found

OSV
OSV
added 2025/09/17 9:15 p.m.15 views

CVE-2025-10618

A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has...

8.8CVSS5.8AI score0.00475EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.12 views

itsourcecode Online Clinic Management System SQL注入漏洞

itsourcecode Online Clinic Management System is a itsourcecode open source online clinic management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Clinic Management System, which stems from an incorrect manipulation of the parameter firstname in the file...

8.8CVSS6.9AI score0.00475EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/17 12:00 a.m.11 views

PT-2025-38277

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Clinic Management System version 1.0 Description: A security issue exists in itsourcecode Online Clinic Management System 1.0 related to the transact.php file. Manipulation of the firstname parameter can lead to SQL...

6.5CVSS6.5AI score0.00475EPSS
SaveExploits1References9
NVD
NVD
added 2025/09/15 11:15 p.m.9 views

CVE-2025-10483

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/saveuser.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The...

8.8CVSS0.00418EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/15 11:15 p.m.12 views

CVE-2025-10483

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/saveuser.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/15 10:32 p.m.4 views

CVE-2025-10483 SourceCodester Online Student File Management System save_user.php sql injection

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/saveuser.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The...

6.5CVSS6.6AI score0.00418EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/15 10:32 p.m.26 views

CVE-2025-10483 SourceCodester Online Student File Management System save_user.php sql injection

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/saveuser.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The...

6.5CVSS0.00418EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.11 views

SourceCodester Online Student File Management SQL注入漏洞

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A SQL injection vulnerability exists in SourceCodester Online Student File Management version 1.0, which stems from an incorrect manipulation of the parameter firstname in the file...

8.8CVSS6.9AI score0.00418EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.10 views

PT-2025-37775

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A SQL injection flaw exists due to the manipulation of the firstname argument in the /admin/save user.php file. This manipulation can be carried out remotely. The...

6.5CVSS6.4AI score0.00418EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/09/10 12:34 a.m.18 views

CVE-2025-10075

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS5.9AI score0.00245EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/08 1:15 a.m.15 views

CVE-2025-10075

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS0.00245EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/08 1:15 a.m.12 views

CVE-2025-10075

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS4.2AI score0.00245EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/08 12:32 a.m.26 views

CVE-2025-10075 SourceCodester Online Polling System manage-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.1CVSS0.00245EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/08 12:32 a.m.7 views

CVE-2025-10075 SourceCodester Online Polling System manage-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.1CVSS5.5AI score0.00245EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/08 12:32 a.m.32 views

CVE-2025-10075

SourceCodester Online Polling System 1.0 contains a cross-site scripting (XSS) flaw in /manage-profile.php triggered by manipulating the firstname parameter. The vulnerability can be exploited remotely and exploits have been released publicly. Multiple sources (NVD, Red Hat, CNNVD, PT-Security, a...

5.4CVSS4AI score0.00245EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/09/03 4:23 p.m.11 views

CVE-2025-9786

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teachersignup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and coul...

9.8CVSS7.4AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/01 9:15 p.m.10 views

CVE-2025-9794

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/09/01 8:32 p.m.26 views

CVE-2025-9794 Campcodes Computer Sales and Inventory System pos_transac.php sql injection

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

7.5CVSS0.00421EPSS
SaveExploits1References7
NVD
NVD
added 2025/09/01 4:15 p.m.12 views

CVE-2025-9786

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teachersignup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and coul...

9.8CVSS0.00417EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/01 3:32 p.m.4 views

CVE-2025-9786 Campcodes Online Learning Management System teacher_signup.php sql injection

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teachersignup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and coul...

7.5CVSS6.9AI score0.00417EPSS
SaveExploits1References5
Rows per page
Query Builder