Lucene search
K

2147 matches found

CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an itsourcecode open source society management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Society Management System, which stems from incorrect manipulation of the parameter Username in the file /admin/addadmin.php, which...

9.8CVSS7.9AI score0.0002EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an itsourcecode open source society management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Society Management System, which stems from incorrect manipulation of the parameter Username in the file /admin/editadminquery.php,...

9.8CVSS7.9AI score0.0002EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/29 2:32 a.m.1 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS6.8AI score0.0002EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/29 2:32 a.m.28 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS0.0002EPSS
Exploits1References5
OSV
OSV
added 2025/12/29 2:15 a.m.1 views

CVE-2025-15166

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

9.8CVSS5.7AI score
Exploits0References5
CVE
CVE
added 2025/12/29 2:2 a.m.4 views

CVE-2025-15167

CVE-2025-15167 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability lies in the detailtransac.php file where improper handling of the ID parameter enables SQL injection, with remote exploitation possible and public exploits disclosed. Connected sources corroborate a SQL injecti...

9.8CVSS6.5AI score0.00021EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/12/29 1:32 a.m.4 views

CVE-2025-15166

CVE-2025-15166 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability is a SQL injection in the file /updatesupplier.php?action=edit caused by manipulated ID parameter in an unknown function. Attacks can be remote and the exploit has been publicly released. Several connected sour...

9.8CVSS7.2AI score0.00021EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/12/29 1:15 a.m.2 views

CVE-2025-15165

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00021EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/29 1:2 a.m.2 views

CVE-2025-15165 itsourcecode Online Cake Ordering System updatecustomer.php sql injection

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

7.5CVSS7.2AI score0.00021EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.2 views

itsourcecode Student Management System 安全漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter ID in the file /statistical.php, which may le...

9.8CVSS7.1AI score0.0002EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.2 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00021EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.2 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00021EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.2 views

PT-2025-53681

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Cake Ordering System version 1.0. The issue is located in an unknown function within the /updatesupplier.php?action=edit file...

9.8CVSS7.5AI score0.00021EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.1 views

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

7.5CVSS7.6AI score0.0002EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/12/26 4:19 a.m.3 views

CVE-2025-15077

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

9.8CVSS7AI score0.00027EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/26 3:22 a.m.3 views

CVE-2025-15075

A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /studentp.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

9.8CVSS7.1AI score0.00009EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/25 6:30 a.m.2 views

EUVD-2025-205369

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

7.5CVSS6.6AI score0.00027EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/25 5:2 a.m.2 views

CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /listreport.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS6.8AI score0.00027EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/25 5:2 a.m.22 views

CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /listreport.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS0.00027EPSS
Exploits1References5
CVE
CVE
added 2025/12/25 5:2 a.m.7 views

CVE-2025-15078

The CVE-2025-15078 entry concerns itsourcecode Student Management System 1.0. The vulnerability affects the /list_report.php file, where manipulation of the sy parameter in an unknown function yields a SQL injection. Exploitation is plausible remotely, and public PoCs exist according to the sourc...

9.8CVSS6.8AI score0.00027EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder