Lucene search
+L

2835 matches found

Cvelist
Cvelist
•added 2025/12/29 2:32 a.m.•65 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS0.00383EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/29 2:15 a.m.•14 views

CVE-2025-15166

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

9.8CVSS5.7AI score0.00379EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/29 2:02 a.m.•26 views

CVE-2025-15167

CVE-2025-15167 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability lies in the detailtransac.php file where improper handling of the ID parameter enables SQL injection, with remote exploitation possible and public exploits disclosed. Connected sources corroborate a SQL injecti...

9.8CVSS6.5AI score0.00379EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/12/29 1:32 a.m.•33 views

CVE-2025-15166

CVE-2025-15166 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability is a SQL injection in the file /updatesupplier.php?action=edit caused by manipulated ID parameter in an unknown function. Attacks can be remote and the exploit has been publicly released. Several connected sour...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2025/12/29 1:15 a.m.•15 views

CVE-2025-15165

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/29 1:02 a.m.•8 views

CVE-2025-15165 itsourcecode Online Cake Ordering System updatecustomer.php sql injection

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

7.5CVSS7.2AI score0.00379EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•2 views

CVE-2025-15166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•13 views

itsourcecode Student Management System 安全漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter ID in the file /statistical.php, which may le...

9.8CVSS7.1AI score0.00383EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•20 views

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

7.5CVSS7.6AI score0.00383EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•20 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•15 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•28 views

PT-2025-53681

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Cake Ordering System version 1.0. The issue is located in an unknown function within the /updatesupplier.php?action=edit file...

9.8CVSS7.5AI score0.00379EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
•added 2025/12/26 4:19 a.m.•23 views

CVE-2025-15077

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

9.8CVSS7AI score0.00384EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/26 3:22 a.m.•26 views

CVE-2025-15075

A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /studentp.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

9.8CVSS7.1AI score0.00423EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/25 6:30 a.m.•16 views

EUVD-2025-205369

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

7.5CVSS6.6AI score0.00384EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/25 5:02 a.m.•8 views

CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /listreport.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS6.8AI score0.00384EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/25 5:02 a.m.•30 views

CVE-2025-15078

The CVE-2025-15078 entry concerns itsourcecode Student Management System 1.0. The vulnerability affects the /list_report.php file, where manipulation of the sy parameter in an unknown function yields a SQL injection. Exploitation is plausible remotely, and public PoCs exist according to the sourc...

9.8CVSS6.8AI score0.00384EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/25 5:02 a.m.•45 views

CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /listreport.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS0.00384EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/25 4:15 a.m.•13 views

CVE-2025-15077

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

9.8CVSS0.00384EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/25 4:02 a.m.•31 views

CVE-2025-15077

CVE-2025-15077 affects itsourcecode Student Management System 1.0. The vulnerable element is the file /form137.php; manipulating the argument ID leads to a SQL injection. Exploitation can occur remotely (no authentication required) and public exploits have been disclosed. Multiple feeds (NVD, Red...

9.8CVSS6.7AI score0.00384EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder