Lucene search
+L

2836 matches found

CNNVD
CNNVD
•added 2025/12/08 12:00 a.m.•15 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter sub in the file /newsubject.php, which...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/11/25 3:35 a.m.•26 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS7.1AI score0.00308EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/24 6:15 a.m.•14 views

CVE-2025-13585

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References6
NVD
NVD
•added 2025/11/24 4:15 a.m.•14 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS0.00308EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/24 4:15 a.m.•14 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS5.8AI score0.00308EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/24 3:32 a.m.•5 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS6.8AI score0.00308EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/24 3:32 a.m.•26 views

CVE-2025-13581

Summary of CVE-2025-13581 (itsourcecode Student Information System 1.0): The vulnerability resides in an unknown functionality of the file /schedule_edit1.php where manipulating the argument schedule_id enables an SQL injection. It can be exploited remotely, and publicly available exploit materia...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/24 3:32 a.m.•41 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS0.00308EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•14 views

itsourcecode Student Information System SQL注入漏洞

itsourcecode Student Information System is an itsourcecode open source student information system. The SQL injection vulnerability exists in itsourcecode Student Information System version 1.0, which stems from an incorrect manipulation of the scheduleid parameter in the file /scheduleedit1.php,...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/23 9:32 p.m.•6 views

CVE-2025-13570 itsourcecode COVID Tracking System page sql injection

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made publ...

6.5CVSS6.7AI score0.00308EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/23 9:32 p.m.•29 views

CVE-2025-13570 itsourcecode COVID Tracking System page sql injection

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made publ...

6.5CVSS0.00308EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/23 9:02 p.m.•27 views

CVE-2025-13569

Summary: CVE-2025-13569 affects itsourcecode COVID Tracking System 1.0. The vulnerability is an SQL injection in the file path /admin/?page=city caused by manipulation of the ID parameter. It can be exploited remotely and the exploit has been disclosed publicly. Reported across multiple sources (...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/23 9:02 p.m.•28 views

CVE-2025-13569 itsourcecode COVID Tracking System page sql injection

A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS0.00308EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/23 8:32 p.m.•9 views

CVE-2025-13568 itsourcecode COVID Tracking System page sql injection

A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.6AI score0.00308EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/23 8:32 p.m.•35 views

CVE-2025-13568

CVE-2025-13568 itsourcecode COVID Tracking System 1.0 has a SQL injection vulnerability in the admin page at /admin/?page=people, caused by improper handling of the argument ID. The issue is exploitable remotely and an exploit has been published, enabling likely unauthorized data access or manipu...

8.8CVSS6.6AI score0.00308EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/11/23 8:15 p.m.•14 views

CVE-2025-13567

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

8.8CVSS0.00308EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/23 8:02 p.m.•7 views

CVE-2025-13567 itsourcecode COVID Tracking System page sql injection

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

6.5CVSS6.8AI score0.00308EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/23 8:02 p.m.•27 views

CVE-2025-13567

The CVE-2025-13567 entry affects itsourcecode COVID Tracking System 1.0. The vulnerability is an SQL injection in the /admin/?page=establishment path, caused by manipulation of the ID parameter. It enables remote exploitation and, per sources, the exploit is public and may be used. Multiple conne...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/11/23 12:00 a.m.•16 views

itsourcecode COVID Tracking System SQL注入漏洞

itsourcecode COVID Tracking System is a new coronavirus tracking system open-sourced by itsourcecode. An SQL injection vulnerability exists in version 1.0 of itsourcecode COVID Tracking System, which stems from a misbehavior of the parameter ID by an unknown function in the file...

8.8CVSS6.9AI score0.00308EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/23 12:00 a.m.•14 views

itsourcecode COVID Tracking System SQL注入漏洞

itsourcecode COVID Tracking System is a new coronavirus tracking system open-sourced by itsourcecode. An SQL injection vulnerability exists in version 1.0 of itsourcecode COVID Tracking System, which stems from a misbehavior of an unknown function in the parameter ID in the file /admin/?page=city...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References6
Rows per page
Query Builder