Lucene search
+L

234 matches found

CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•16 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which originates from the incorrect manipulation of the parameter Product in the file...

9.8CVSS7.7AI score0.00401EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•19 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file /admindetail.php, which...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/13 4:16 p.m.•17 views

CVE-2025-14587

A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/13 9:32 a.m.•57 views

CVE-2025-14587 itsourcecode Online Pet Shop Management System available.php sql injection

A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

7.5CVSS0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•17 views

itsourcecode Online Pet Shop Management System SQL注入漏洞

itsourcecode Online Pet Shop Management System is itsourcecode open source online pet store management system. SQL injection vulnerability exists in itsourcecode Online Pet Shop Management System version 1.0, the vulnerability stems from incorrect manipulation of the parameter Name in the file...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/11/21 12:15 a.m.•25 views

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00371EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•8 views

CVE-2025-13485: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7AI score0.00371EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/21 12:00 a.m.•17 views

PT-2025-47647

Name of the Vulnerable Software and Affected Versions itsourcecode Online File Management System version 1.0 Description A security flaw exists in itsourcecode Online File Management System version 1.0. The issue involves SQL injection due to the manipulation of the Username argument in the...

9.8CVSS7.3AI score0.00371EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2025/11/17 2:02 p.m.•14 views

CVE-2025-13286 itsourcecode Online Voting System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.5AI score0.00335EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/17 2:02 p.m.•33 views

CVE-2025-13286

CVE-2025-13286 affects itsourcecode Online Voting System 1.0. The vulnerability is an SQL injection in the parameter ID of the file "/ajax.php?action=save_user" caused by inadequate input validation. Remote exploitation is possible and exploit code has been publicly released. Connected sources id...

8.8CVSS6.5AI score0.00335EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/17 2:02 p.m.•32 views

CVE-2025-13286 itsourcecode Online Voting System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/17 1:32 p.m.•9 views

CVE-2025-13285 itsourcecode Online Voting System login.php sql injection

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

7.5CVSS7AI score0.00451EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/11/17 1:32 p.m.•39 views

CVE-2025-13285 itsourcecode Online Voting System login.php sql injection

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

7.5CVSS0.00451EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•30 views

PT-2025-47146

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the Username parameter within an unknown function of the /login.php...

9.8CVSS6.9AI score0.00451EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•21 views

PT-2025-47147

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A security flaw exists in itsourcecode Online Voting System version 1.0. The issue involves SQL injection stemming from manipulation of the ID argument within the file...

6.5CVSS7AI score0.00335EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13285: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

9.8CVSS7AI score0.00451EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•5 views

CVE-2025-13286: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

8.8CVSS6.5AI score0.00335EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13287: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available ...

8.8CVSS6.5AI score0.0036EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/11/12 9:15 p.m.•19 views

CVE-2025-13061

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS5.5AI score0.00327EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/12 8:32 p.m.•7 views

CVE-2025-13061 itsourcecode Online Voting System index.php unrestricted upload

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

6.5CVSS6.3AI score0.00327EPSS
SaveExploits1References5
Rows per page
Query Builder