Lucene search
K

2147 matches found

CNNVD
CNNVD
added 2025/11/16 12:0 a.m.4 views

itsourcecode Inventory Management System SQL注入漏洞

itsourcecode Inventory Management System is an inventory management system of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Inventory Management System version 1.0, which originates from a misuse of the parameter ID in file /index.php?q=single-item, which may lead...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that originates from improper handling of the UUSERNAME parameter in the /LogSignModal.PHP file. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that stems from improper handling of the ID parameter in the /admin/products/index.php?view=edit file. No details of the vulnerability are available at this time...

9.8CVSS7AI score0.00027EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the PROID parameter in the /index.php?q=product file that does not securely filter user input. An attacker can exploit this vulnerability ...

9.8CVSS7AI score0.00027EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.2 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/16 12:0 a.m.3 views

PT-2025-47068

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A SQL injection issue exists in itsourcecode Inventory Management System. The issue is triggered by manipulating the PROID argument in the /index.php?q=product endpoint. This...

9.8CVSS6.8AI score0.00027EPSS
Exploits1References10
NVD
NVD
added 2025/11/15 7:15 p.m.2 views

CVE-2025-13210

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be performed from remote. The exploit has...

9.8CVSS0.00026EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/15 7:2 p.m.2 views

CVE-2025-13210 itsourcecode Inventory Management System index.php sql injection

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be performed from remote. The exploit has...

5.8CVSS6.6AI score0.00026EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/15 7:2 p.m.8 views

CVE-2025-13210 itsourcecode Inventory Management System index.php sql injection

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be performed from remote. The exploit has...

5.8CVSS0.00026EPSS
Exploits1References5
CVE
CVE
added 2025/11/15 7:2 p.m.7 views

CVE-2025-13210

The CVE-2025-13210 issue affects itsourcecode Inventory Management System 1.0. The vulnerability resides in the PROMODEL parameter of /admin/products/index.php?view=add, where improper handling enables SQL injection. This can be exploited remotely and an exploit has been publicly disclosed. Multi...

9.8CVSS5.2AI score0.00026EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/15 12:0 a.m.2 views

itsourcecode Inventory Management System SQL注入漏洞

itsourcecode Inventory Management System is an inventory management system of itsourcecode open source. The SQL injection vulnerability exists in itsourcecode Inventory Management System version 1.0, which originates from the incorrect operation of the parameter PROMODEL in the file...

9.8CVSS5.8AI score0.00026EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/13 9:6 p.m.1 views

CVE-2025-13061

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS6.6AI score0.00043EPSS
Exploits1References1
OSV
OSV
added 2025/11/12 9:15 p.m.1 views

CVE-2025-13061

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS5.5AI score0.00043EPSS
Exploits1References5
NVD
NVD
added 2025/11/12 9:15 p.m.3 views

CVE-2025-13061

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS0.00043EPSS
Exploits1References5
CVE
CVE
added 2025/11/12 8:32 p.m.6 views

CVE-2025-13061

The connected sources confirm a concrete vulnerability in itsourcecode Online Voting System 1.0 related to unrestricted file uploads. The issue stems from a lack of validation for uploaded files via the /index.php?page=manage_voting (CNVD and NVD descriptions). This can be triggered remotely and ...

8.8CVSS6.3AI score0.00043EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/12 8:32 p.m.5 views

CVE-2025-13061 itsourcecode Online Voting System index.php unrestricted upload

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

6.5CVSS0.00043EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/12 8:32 p.m.1 views

CVE-2025-13061 itsourcecode Online Voting System index.php unrestricted upload

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

6.5CVSS6.3AI score0.00043EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/12 12:0 a.m.2 views

PT-2025-46715

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for unrestricted file uploads. This issue impacts an unknown function within the /index.php?page=manage voting file and ca...

6.5CVSS6.2AI score0.00043EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.1 views

itsourcecode Online Voting System 代码问题漏洞

Online Voting System is an online voting system. Online Voting System has a code issue vulnerability that stems from a lack of validation of uploaded files in the page parameter of file /index.php. An attacker can exploit this vulnerability to upload malicious files...

8.8CVSS6.6AI score0.00043EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/04 12:53 a.m.14 views

CVE-2025-12608

A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manageuser.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has...

9.8CVSS7AI score0.00032EPSS
Exploits1References1
Rows per page
Query Builder