Lucene search
+L

245 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•14 views

CVE-2026-4235: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument useremail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

7.5CVSS7AI score0.00427EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•13 views

CVE-2026-4236: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulation of the argument txtsearch/deptname/name leads to sql injection. The attack may be performed from remote. The explo...

7.5CVSS6.9AI score0.00462EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/12 5:16 a.m.•16 views

CVE-2026-3981

A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctoraction.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

9.8CVSS0.00607EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•11 views

CVE-2025-15166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/24 11:02 p.m.•8 views

CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

7.5CVSS7.1AI score0.00423EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•17 views

Itsourcecode Online Frozen Foods Ordering System SQL Injection Vulnerability

itsourcecode Online Frozen Foods Ordering System is itsourcecode open source online frozen food ordering system . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Frozen Foods Ordering System, which stems from an incorrect manipulation of the parameter Name in the file...

9.8CVSS7.1AI score0.00423EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-15073: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

9.8CVSS7.1AI score0.00423EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/17 10:02 p.m.•30 views

CVE-2025-14832

The affected software is itsourcecode Online Cake Ordering System v1.0. The vulnerability lies in the file /updateproduct.php?action=edit where manipulation of the ID parameter enables SQL injection, enabling remote exploitation. Multiple connected sources corroborate a publicly available exploit...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/12/14 9:30 a.m.•17 views

EUVD-2025-203292

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/12/14 9:02 a.m.•50 views

CVE-2025-14652 itsourcecode Online Cake Ordering System admindetail.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•20 views

Itsourcecode Online Cake Ordering System SQL Injection Vulnerability

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file /admindetail.php, which...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/14 12:00 a.m.•20 views

PT-2025-51136

Name of the Vulnerable Software and Affected Versions itsourcecode Online Pet Shop Management System version 1.0 Description A security issue exists in itsourcecode Online Pet Shop Management System version 1.0 related to the processing of the file /pet1/update cnp.php. Manipulation of the ID...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•17 views

Itsourcecode Online Cake Ordering System SQL Injection Vulnerability

itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which originates from the incorrect manipulation of the parameter Product in the file...

9.8CVSS7.1AI score0.00401EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/13 4:16 p.m.•19 views

CVE-2025-14587

A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/13 9:32 a.m.•58 views

CVE-2025-14587 itsourcecode Online Pet Shop Management System available.php sql injection

A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

7.5CVSS0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•19 views

Itsourcecode Online Pet Shop Management System SQL Injection Vulnerability

itsourcecode Online Pet Shop Management System is itsourcecode open source online pet store management system. SQL injection vulnerability exists in itsourcecode Online Pet Shop Management System version 1.0, the vulnerability stems from incorrect manipulation of the parameter Name in the file...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/11/21 12:15 a.m.•25 views

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.1AI score0.00403EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•8 views

CVE-2025-13485: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.1AI score0.00403EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/21 12:00 a.m.•17 views

PT-2025-47647

Name of the Vulnerable Software and Affected Versions itsourcecode Online File Management System version 1.0 Description A security flaw exists in itsourcecode Online File Management System version 1.0. The issue involves SQL injection due to the manipulation of the Username argument in the...

9.8CVSS6.9AI score0.00403EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2025/11/17 2:02 p.m.•14 views

CVE-2025-13286 itsourcecode Online Voting System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.4AI score0.00335EPSS
SaveExploits1References5
Rows per page
Query Builder