Lucene search
K

156 matches found

CNNVD
CNNVD
added 2026/01/18 12:0 a.m.1 views

Itsourcecode Society Management System SQL Injection Vulnerability

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Title” in the file...

9.8CVSS5.8AI score0.00018EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/01/05 8:32 a.m.25 views

CVE-2026-0582 itsourcecode Society Management System edit_activity_query.php sql injection

A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/editactivityquery.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

6.5CVSS0.0002EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-1003

Name of the Vulnerable Software and Affected Versions itsourcecode School Management System version 1.0 Description A security flaw exists in itsourcecode School Management System 1.0. The issue affects an unknown part of the file /student/index.php. Manipulation of the ID argument can lead to SQ...

9.8CVSS7AI score0.0002EPSS
Exploits1References12
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an itsourcecode open source society management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Society Management System, which stems from incorrect manipulation of the parameter Username in the file /admin/addadmin.php, which...

9.8CVSS7.9AI score0.0002EPSS
Exploits1References5
CVE
CVE
added 2025/12/29 1:32 a.m.4 views

CVE-2025-15166

CVE-2025-15166 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability is a SQL injection in the file /updatesupplier.php?action=edit caused by manipulated ID parameter in an unknown function. Attacks can be remote and the exploit has been publicly released. Several connected sour...

9.8CVSS7.2AI score0.00021EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/26 3:22 a.m.3 views

CVE-2025-15075

A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /studentp.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

9.8CVSS7.1AI score0.00007EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/25 2:32 a.m.18 views

CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

7.5CVSS0.00006EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.3 views

PT-2025-53382

Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Frozen Foods Ordering System version 1.0. The issue is located in the /contact us.php file. Manipulation of the Name...

9.8CVSS7.4AI score0.00008EPSS
Exploits1References11
Vulnrichment
Vulnrichment
added 2025/12/17 10:2 p.m.1 views

CVE-2025-14832 itsourcecode Online Cake Ordering System updateproduct.php sql injection

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS6.8AI score0.00028EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/14 9:30 a.m.2 views

EUVD-2025-203287

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.6AI score0.00028EPSS
Exploits1References6
CVE
CVE
added 2025/12/13 9:32 a.m.6 views

CVE-2025-14587

CVE-2025-14587 affects itsourcecode Online Pet Shop Management System 1.0. The vulnerability is in /pet1/available.php where manipulation of the Name parameter leads to SQL injection. Exploitation can be performed remotely and publicly available exploits exist. The issue exposes confidentiality, ...

9.8CVSS7.2AI score0.00028EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/09 6:32 p.m.21 views

CVE-2025-14334 itsourcecode Student Management System new_adviser.php sql injection

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newadviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

7.5CVSS0.00028EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/09 4:42 a.m.3 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS6.8AI score0.00039EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/08 5:32 p.m.20 views

CVE-2025-14258 itsourcecode Student Management System newsubject.php sql injection

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newsubject.php. The manipulation of the argument sub leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

7.5CVSS0.00028EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/08 4:32 p.m.18 views

CVE-2025-14256 itsourcecode Student Management System newcurriculm.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /newcurriculm.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

7.5CVSS0.00028EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/11/25 3:35 a.m.5 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS7.1AI score0.00027EPSS
Exploits1References1
NVD
NVD
added 2025/11/24 4:15 a.m.2 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS0.00027EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/21 12:2 a.m.2 views

CVE-2025-13485 itsourcecode Online File Management System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.00025EPSS
Exploits0References5
EUVD
EUVD
added 2025/11/21 12:2 a.m.3 views

EUVD-2025-198366

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00025EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.2 views

itsourcecode Student Information System SQL注入漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. The SQL injection vulnerability exists in itsourcecode Student Information System version 1.0, which originates from incorrect manipulation of the parameter enid in the file /enrollmentedit1.php,...

8.8CVSS6.8AI score0.00027EPSS
Exploits1References6
Rows per page
Query Builder