Lucene search
+L

43 matches found

OSV
OSV
•added 2025/11/16 3:15 a.m.•15 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/16 3:15 a.m.•17 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS0.00323EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 3:02 a.m.•26 views

CVE-2025-13234 itsourcecode Inventory Management System index.php sql injection

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS0.00323EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 3:02 a.m.•37 views

CVE-2025-13234

The CVE-2025-13234 affects itsourcecode Inventory Management System 1.0, with a SQL injection flaw in the PROID parameter of /index.php?q=product. Multiple sources confirm remote exploitation and a publicly released exploit. Remediation is not detailed in the initial document beyond recommending ...

9.8CVSS6.4AI score0.00323EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 3:02 a.m.•9 views

CVE-2025-13234 itsourcecode Inventory Management System index.php sql injection

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS6.4AI score0.00323EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•22 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the PROID parameter in the /index.php?q=product file that does not securely filter user input. An attacker can exploit this vulnerability ...

9.8CVSS7AI score0.00323EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-26067

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00244EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/28 2:15 p.m.•19 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...

6.5CVSS0.00244EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/28 2:15 p.m.•16 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...

6.5CVSS6AI score0.00244EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•13 views

PuneethReddyHc Online Shopping System Advanced 安全漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHc Online Shopping System Advanced version 1.0, which stems from the proId parameter not being cleare...

6.5CVSS7.7AI score0.00244EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/08/28 12:00 a.m.•26 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...

0.00244EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/28 12:00 a.m.•40 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced version 1.0 . The application fails to properly sanitize user-supplied input within the proId POST parameter, which allows an attacker to inject arbitrary SQL expressions. This vulnerabil...

6.5CVSS7.6AI score0.00244EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/28 12:00 a.m.•8 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...

7.5AI score0.00244EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/18 12:00 a.m.•17 views

Modern Bag action.php file SQL injection vulnerability

Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter proId in file /action.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL comman...

9.8CVSS8.3AI score0.00454EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/12 12:00 a.m.•15 views

Code-Projects Modern Bag 注入漏洞

Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter proId in file /action.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL comman...

9.8CVSS8.2AI score0.00454EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/22 12:00 a.m.•23 views

Code-Projects Online Shopping Store 安全漏洞

Code-Projects Online Shopping Store is a Code-Projects open source online store. A security vulnerability exists in Code-Projects Online Shopping Store version 1.0, which originates from SQL injection due to incorrect manipulation of the parameters catid/brandid/keyword/proId/pid in file/action.p...

7.2CVSS5.6AI score0.00525EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 3:01 a.m.•16 views

CVE-2023-1736

A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this issue is some unknown functionality of the file cart/controller.php?action=add. The manipulation of the argument PROID leads to sql injection. The identifi...

8.8CVSS8.2AI score0.00439EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/30 8:15 p.m.•16 views

CVE-2023-1736

A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this issue is some unknown functionality of the file cart/controller.php?action=add. The manipulation of the argument PROID leads to sql injection. The identifi...

8.8CVSS6.2AI score0.00439EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/30 12:00 a.m.•15 views

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter PROID resulting in sql...

8.8CVSS6.4AI score0.00439EPSS
SaveExploits0References4
zdt
zdt
•added 2021/11/22 12:00 a.m.•424 views

PuneethReddyHC Online Shopping System Advanced 1.0 SQL Injection Vulnerability

PuneethReddyHC Online Shopping System Advanced version 1.0 suffers from a remote SQL injection vulnerability. CVE-2021-41648 CVE-2021-41648 SQL Injection in online-shopping-system The online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection...

7.5CVSS7.4AI score0.10169EPSS
SaveExploits4
Rows per page
Query Builder