Lucene search
+L

22540 matches found

NVD
NVD
added 2025/11/23 6:15 p.m.11 views

CVE-2025-13561

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

9.8CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/23 5:32 p.m.21 views

CVE-2025-13561

This CVE concerns SourceCodester Company Website CMS 1.0. The vulnerability exists in the /admin/index.php code where manipulation of the Username parameter enables SQL injection. Remote exploitation is possible, and public exploit disclosure is noted. Multiple connected sources corroborate the i...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/23 5:32 p.m.10 views

CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

7.5CVSS6.8AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/23 5:32 p.m.24 views

CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

7.5CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/23 4:18 p.m.18 views

MAL-2025-191875 Malicious code in speed-testing-vps (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 227b3ee25e084b57a160b7287f80a8ab8da0559184c81b5e9cae1d03941ca51b The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
OSV
OSV
added 2025/11/23 4:15 p.m.11 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/23 3:02 p.m.6 views

CVE-2025-13554 Campcodes Supplier Management System Login index.php sql injection

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS6.7AI score0.00387EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/23 12:30 p.m.12 views

EUVD-2025-198563

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /adminarea/index.php. The manipulation of the argument editpack leads to sql injection. The attack can be...

5.8CVSS6.4AI score0.00382EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/23 12:20 p.m.8 views

MAL-2025-191792 Malicious code in minizip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 33ba100525dffc7a828e4b7384f862ff22dfb55d2e7d61a34c0d31ecdff64c10 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.2AI score
SaveExploits0References4
OSV
OSV
added 2025/11/23 10:15 a.m.9 views

CVE-2025-13545

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /adminarea/index.php. The manipulation of the argument editpack leads to sql injection. The attack can be...

7.2CVSS5.7AI score0.00382EPSS
SaveExploits1References4
NVD
NVD
added 2025/11/23 10:15 a.m.8 views

CVE-2025-13545

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /adminarea/index.php. The manipulation of the argument editpack leads to sql injection. The attack can be...

7.2CVSS0.00382EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/11/23 10:02 a.m.31 views

CVE-2025-13545 ashraf-kabir travel-agency index.php sql injection

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /adminarea/index.php. The manipulation of the argument editpack leads to sql injection. The attack can be...

5.8CVSS0.00382EPSS
SaveExploits1References4
CVE
CVE
added 2025/11/23 10:02 a.m.27 views

CVE-2025-13545

CVE-2025-13545 affects ashraf-kabir travel-agency; vulnerable component is the /admin_area/index.php file where manipulating the edit_pack parameter triggers an SQL injection. The vulnerability can be exploited remotely and has been publicly disclosed. No concrete product versions or fixed releas...

7.2CVSS6.6AI score0.00382EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/23 12:00 a.m.14 views

PT-2025-47855

Name of the Vulnerable Software and Affected Versions SourceCodester Company Website CMS version 1.0 Description A flaw exists in SourceCodester Company Website CMS 1.0 that allows for SQL injection through manipulation of the Username argument in the file '/admin/index.php'. This allows for remo...

9.8CVSS7.5AI score0.00387EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/11/23 12:00 a.m.10 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from an incorrect manipulation of the parameter txtUsername in the file /index.php, which could lead to S...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/23 12:00 a.m.55 views

PT-2025-47837

Name of the Vulnerable Software and Affected Versions ashraf-kabir travel-agency versions prior to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3 Description A security issue exists in ashraf-kabir travel-agency. The manipulation of the edit pack argument in the /admin area/index.php file leads to SQL...

7.2CVSS4.7AI score0.00382EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/11/23 12:00 a.m.15 views

PT-2025-47846

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A security issue exists in Campcodes Supplier Management System 1.0. The vulnerability involves the Login component and specifically affects the /index.php file. Manipulation of the...

7.5CVSS7.4AI score0.00387EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/11/23 12:00 a.m.8 views

SourceCodester Company Website CMS SQL注入漏洞

SourceCodester Company Website CMS is a SourceCodester open source content management system. A SQL injection vulnerability exists in SourceCodester Company Website CMS version 1.0, which originates from the incorrect operation of the parameter Username in the file /admin/index.php, which may lea...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/23 12:00 a.m.11 views

CampCodes School File Management System SQL注入漏洞

CampCodes School File Management System is a school file management system from CampCodes Philippines. A SQL injection vulnerability exists in Campcodes School File Management System version 1.0, which stems from the incorrect operation of the parameter studentno in the file /index.php, which may...

9.8CVSS7.9AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/23 12:00 a.m.10 views

Travel Agency SQL注入漏洞

Travel Agency is a travel management website by Ashraf Kabir, an individual developer. Travel Agency suffers from an SQL injection vulnerability that stems from incorrect manipulation of the parameter editpack in the file /adminarea/index.php, which could lead to SQL injection...

7.2CVSS5.7AI score0.00382EPSS
SaveExploits1References5
Rows per page
Query Builder