Lucene search
K

90 matches found

OSV
OSV
added 2025/11/21 12:15 a.m.2 views

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00025EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.5 views

PT-2025-47647

Name of the Vulnerable Software and Affected Versions itsourcecode Online File Management System version 1.0 Description A security flaw exists in itsourcecode Online File Management System version 1.0. The issue involves SQL injection due to the manipulation of the Username argument in the...

9.8CVSS7.3AI score0.00025EPSS
Exploits0References11
CVE
CVE
added 2025/11/17 2:2 p.m.6 views

CVE-2025-13286

CVE-2025-13286 affects itsourcecode Online Voting System 1.0. The vulnerability is an SQL injection in the parameter ID of the file "/ajax.php?action=save_user" caused by inadequate input validation. Remote exploitation is possible and exploit code has been publicly released. Connected sources id...

8.8CVSS6.4AI score0.00027EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 2:2 p.m.2 views

CVE-2025-13286 itsourcecode Online Voting System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.3AI score0.00027EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/17 2:2 p.m.7 views

CVE-2025-13286 itsourcecode Online Voting System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS0.00027EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 1:32 p.m.2 views

CVE-2025-13285 itsourcecode Online Voting System login.php sql injection

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

7.5CVSS6.8AI score0.0004EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/11/17 1:32 p.m.8 views

CVE-2025-13285 itsourcecode Online Voting System login.php sql injection

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

7.5CVSS0.0004EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.4 views

PT-2025-47146

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the Username parameter within an unknown function of the /login.php...

9.8CVSS6.9AI score0.0004EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.2 views

PT-2025-47147

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A security flaw exists in itsourcecode Online Voting System version 1.0. The issue involves SQL injection stemming from manipulation of the ID argument within the file...

6.5CVSS7AI score0.00027EPSS
Exploits1References8
OSV
OSV
added 2025/11/12 9:15 p.m.2 views

CVE-2025-13061

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS5.5AI score0.0005EPSS
Exploits1References5
CVE
CVE
added 2025/11/12 8:32 p.m.6 views

CVE-2025-13061

The connected sources confirm a concrete vulnerability in itsourcecode Online Voting System 1.0 related to unrestricted file uploads. The issue stems from a lack of validation for uploaded files via the /index.php?page=manage_voting (CNVD and NVD descriptions). This can be triggered remotely and ...

8.8CVSS6.3AI score0.0005EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/12 8:32 p.m.1 views

CVE-2025-13061 itsourcecode Online Voting System index.php unrestricted upload

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

6.5CVSS6.3AI score0.0005EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.4 views

PT-2025-44741

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in itsourcecode Online Loan Management System that allows for SQL injection. Manipulation of the ID argument in the /manage payment.php file can lead to remote co...

9.8CVSS7.8AI score0.00032EPSS
Exploits1References10
Vulnrichment
Vulnrichment
added 2025/11/02 11:2 p.m.3 views

CVE-2025-12605 itsourcecode Online Loan Management System manage_loan.php sql injection

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS7AI score0.00031EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.2 views

itsourcecode Online Examination System SQL注入漏洞

itsourcecode Online Examination System is a itsourcecode open source online examination system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Examination System, which stems from an incorrect manipulation of the parameter Username in the file /index.php, which could...

9.8CVSS7.7AI score0.00013EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-47101

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.001EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-47100

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00187EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28819

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00075EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27080

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00066EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-24867

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References5
Rows per page
Query Builder