Lucene search
K

2147 matches found

CNNVD
CNNVD
added 2025/11/02 12:0 a.m.3 views

itsourcecode Online Loan Management System SQL注入漏洞

itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file /manageloan.php,...

9.8CVSS7.7AI score0.00032EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/02 12:0 a.m.4 views

PT-2025-44738

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in itsourcecode Online Loan Management System that allows for SQL injection. This issue affects an unspecified part of the /load fields.php file. The loan id...

9.8CVSS6.8AI score0.00032EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/11/02 12:0 a.m.4 views

PT-2025-44740

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in the processing of the /manage borrower.php file within itsourcecode Online Loan Management System. Manipulation of the ID argument can lead to a SQL injection...

9.8CVSS6.7AI score0.00032EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/10/15 5:44 p.m.2 views

CVE-2025-11736

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

9.8CVSS6.8AI score0.00013EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/10/14 5:32 p.m.7 views

CVE-2025-11736 itsourcecode Online Examination System index.php sql injection

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

7.5CVSS6.6AI score0.00013EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/14 5:32 p.m.7 views

CVE-2025-11736 itsourcecode Online Examination System index.php sql injection

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

7.5CVSS0.00013EPSS
Exploits1References5
CVE
CVE
added 2025/10/14 5:32 p.m.8 views

CVE-2025-11736

CVE-2025-11736 affects itsourcecode Online Examination System 1.0. Affected component: file /index.php, where manipulation of the Username parameter enables SQL injection. Root cause: improper handling of input leading to database query manipulation. Impact: remote exploitation with high likeliho...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.3 views

PT-2025-42160

Name of the Vulnerable Software and Affected Versions itsourcecode Online Examination System version 1.0 Description A flaw exists in itsourcecode Online Examination System 1.0, related to an unknown functionality within the /index.php file. Manipulating the Username argument can lead to a SQL...

7.5CVSS7.2AI score0.00013EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.2 views

itsourcecode Online Examination System SQL注入漏洞

itsourcecode Online Examination System is a itsourcecode open source online examination system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Examination System, which stems from an incorrect manipulation of the parameter Username in the file /index.php, which could...

9.8CVSS7.7AI score0.00013EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/10/08 5:2 a.m.1 views

CVE-2025-11434 itsourcecode Student Transcript Processing System login.php sql injection

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS7.2AI score0.00042EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/08 5:2 a.m.6 views

CVE-2025-11434 itsourcecode Student Transcript Processing System login.php sql injection

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS0.00042EPSS
Exploits1References5
CVE
CVE
added 2025/10/08 5:2 a.m.7 views

CVE-2025-11434

Summary: CVE-2025-11434 affects itsourcecode’s Student Transcript Processing System v1.0, with a SQL injection flaw in the /login.php file via the uname parameter. The issue can be exploited remotely and publicly available exploit code exists. Several sources corroborate the impact and exposure, ...

9.8CVSS7.2AI score0.00042EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/08 5:2 a.m.8 views

CVE-2025-11433

CVE-2025-11433 affects the open-source itsourcecode Leave Management System v1.0. The vulnerability resides in the Redirect/Query Parameter Handler within the file /module/employee/controller.php?action=reset, where manipulation of the argument ID enables reflected cross-site scripting (XSS). Att...

6.1CVSS3.6AI score0.00029EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/08 4:32 a.m.9 views

CVE-2025-11432

CVE-2025-11432 affects itsourcecode Leave Management System 1.0. The vulnerability is in the /reset.php file where manipulating the employid parameter enables an SQL injection. The attack can be performed remotely and the exploit is publicly available. Multiple connected sources corroborate the i...

9.8CVSS7.2AI score0.00042EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-20519

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00278EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-47938

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00097EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-1937

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00112EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-46894

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00197EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-25215

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00072EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-33202

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00097EPSS
Exploits1References5
Rows per page
Query Builder