7897 matches found
CVE-2025-2603
SourceCodester Kortex Lite Advocate Office Management System 1.0 contains a SQL injection vulnerability in deactivate.php caused by unsafely handling the ID parameter. The issue can be exploited remotely, and public disclosures exist. No remediation details are provided in the connected documents.
CVE-2025-2603 SourceCodester Kortex Lite Advocate Office Management System deactivate.php sql injection
A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file deactivate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-2602 SourceCodester Kortex Lite Advocate Office Management System deactivate_reg.php sql injection
A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file deactivatereg.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...
CVE-2025-2602 SourceCodester Kortex Lite Advocate Office Management System deactivate_reg.php sql injection
A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file deactivatereg.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...
CVE-2025-2602
CVE-2025-2602 concerns SourceCodester Kortex Lite Advocate Office Management System v1.0. The affected component is the deactivate_reg.php file where manipulation of the ID parameter enables SQL injection. A remote attacker can exploit this without user interaction, and public disclosure has occu...
CVE-2025-2601
CVE-2025-2601 affects SourceCodester Kortex Lite Advocate Office Management System 1.0, with a vulnerability in the file activate_reg.php. An attacker can manipulate the ID parameter to trigger a SQL injection, potentially remotely exploitable. Multiple connected sources corroborate the issue as ...
CVE-2025-2601 SourceCodester Kortex Lite Advocate Office Management System activate_reg.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file activatereg.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. T...
CVE-2025-2601 SourceCodester Kortex Lite Advocate Office Management System activate_reg.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file activatereg.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. T...
SourceCodester Kortex Lite Advocate Office Management System 注入漏洞
SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...
SourceCodester Kortex Lite Advocate Office Management System 安全漏洞
SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. A security vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...
SourceCodester Kortex Lite Advocate Office Management System 注入漏洞
SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...
PT-2025-12444 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file activate reg.php. The manipulation of the ID argument leads to SQL injection...
SourceCodester Kortex Lite Advocate Office Management System 注入漏洞
SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...
PT-2025-12445 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been identified, affecting the file deactivate reg.php. The manipulation of the ID argument leads to SQL injection. This issue can be...
GHSA-879V-FGGM-VXW2 LiteLLM Has a Leakage of Langfuse API Keys
In berriai/litellm version v1.52.1, an issue in proxyserver.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfusesecret and langfusepublickey, which can provide full access to the Langfuse...
Tripp Lite SU750XL UPS Privilege Escalation / Missing Authentication
Tripp Lite SU750XL UPS suffers from multiple privilege escalation issues due to missing authentication. Although these issues were previously found on PDUs back in 2019, it appears the UPSes are also affected. Author: Lucas Lalumiere Contact: [email protected] Date: 2025-3-17 Vendor: Tripp Li...
WordPress Ads24 Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Ads24 Lite versions = 1.0...
WordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin LinkedIn Lite versions = 1.0...
CVE-2024-12589
The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible fo...
