Lucene search
+L

2998 matches found

CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•19 views

Itsourcecode Society Management System SQL Injection Vulnerability

itsourcecode Society Management System is an itsourcecode open source society management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Society Management System, which stems from incorrect manipulation of the parameter Username in the file /admin/editadminquery.php,...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•8 views

CVE-2025-15353: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function editadminquery of the file /admin/editadminquery.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/29 2:32 a.m.•76 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS0.00383EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/29 2:32 a.m.•11 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS7.2AI score0.00383EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/29 2:15 a.m.•25 views

CVE-2025-15166

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/29 2:02 a.m.•38 views

CVE-2025-15167

CVE-2025-15167 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability lies in the detailtransac.php file where improper handling of the ID parameter enables SQL injection, with remote exploitation possible and public exploits disclosed. Connected sources corroborate a SQL injecti...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/12/29 1:32 a.m.•48 views

CVE-2025-15166

CVE-2025-15166 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability is a SQL injection in the file /updatesupplier.php?action=edit caused by manipulated ID parameter in an unknown function. Attacks can be remote and the exploit has been publicly released. Several connected sour...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/12/29 1:15 a.m.•25 views

CVE-2025-15165

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/29 1:02 a.m.•14 views

CVE-2025-15165 itsourcecode Online Cake Ordering System updatecustomer.php sql injection

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

7.5CVSS7AI score0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•35 views

PT-2025-53681

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Cake Ordering System version 1.0. The issue is located in an unknown function within the /updatesupplier.php?action=edit file...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•25 views

Itsourcecode Online Cake Ordering System SQL Injection Vulnerability

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•27 views

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

9.8CVSS7.3AI score0.00383EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•28 views

Itsourcecode Online Cake Ordering System SQL Injection Vulnerability

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•22 views

Itsourcecode Student Management System security vulnerabilities

itsourcecode Student Management System is an open source student management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter ID in the file /statistical.php, which may le...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•13 views

CVE-2025-15166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/12/26 4:19 a.m.•30 views

CVE-2025-15077

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

9.8CVSS7.1AI score0.00384EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/26 3:22 a.m.•31 views

CVE-2025-15075

A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /studentp.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

9.8CVSS7.1AI score0.00423EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/25 6:30 a.m.•25 views

EUVD-2025-205369

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly...

7.5CVSS7.1AI score0.00384EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/25 5:02 a.m.•9 views

CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /listreport.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS7.2AI score0.00384EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/25 5:02 a.m.•41 views

CVE-2025-15078

The CVE-2025-15078 entry concerns itsourcecode Student Management System 1.0. The vulnerability affects the /list_report.php file, where manipulation of the sy parameter in an unknown function yields a SQL injection. Exploitation is plausible remotely, and public PoCs exist according to the sourc...

9.8CVSS7.2AI score0.00384EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder