CVE-2025-13061

The connected sources confirm a concrete vulnerability in itsourcecode Online Voting System 1.0 related to unrestricted file uploads. The issue stems from a lack of validation for uploaded files via the /index.php?page=manage_voting (CNVD and NVD descriptions). This can be triggered remotely and ...

CVE-2025-12608: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manageuser.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-12606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manageborrower.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

PT-2025-44741

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in itsourcecode Online Loan Management System that allows for SQL injection. Manipulation of the ID argument in the /manage payment.php file can lead to remote co...

CVE-2025-12607: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /managepayment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2025-12605 itsourcecode Online Loan Management System manage_loan.php sql injection

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-12605: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-12604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /loadfields.php. The manipulation of the argument loanid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

itsourcecode Online Examination System SQL注入漏洞

itsourcecode Online Examination System is a itsourcecode open source online examination system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Examination System, which stems from an incorrect manipulation of the parameter Username in the file /index.php, which could...

CVE-2025-11736: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

EUVD-2024-47100

Malicious code in bioql PyPI...

EUVD-2024-47101

Malicious code in bioql PyPI...

EUVD-2025-24867

Malicious code in bioql PyPI...

EUVD-2025-27080

Malicious code in bioql PyPI...

EUVD-2025-28819

Malicious code in bioql PyPI...

CVE-2025-10800: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

CVE-2025-10667: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10668: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

CVE-2025-10620 itsourcecode Online Clinic Management System editp2.php sql injection

A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulation of the argument id/firstname/lastname/type/age/address can lead to sql injection. The attack can be executed remotely. The exploit has...

CVE-2025-10618: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has...