23408 matches found
CVE-2025-14582
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is...
CVE-2025-14582
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is...
CVE-2025-14582 campcodes Online Student Enrollment System index.php unrestricted upload
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is...
CVE-2025-14582
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is...
CVE-2024-14010
creationtimestamp| type| source ---|---|--- 2025-12-12 21:29:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7szuphqa32r...
CVE-2025-8083
creationtimestamp| type| source ---|---|--- 2025-12-12 21:13:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7syy2bkak2y 2025-12-13 13:09:23+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3m7uof56qpf2x...
CVE-2024-58311
creationtimestamp| type| source ---|---|--- 2025-12-12 21:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7syp3suaz2y...
CVE-2025-14568
creationtimestamp| type| source ---|---|--- 2025-12-12 19:45:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7su24oibx2u 2026-08-10 17:07:51+00:00| seen| https://gist.github.com/qianqiusujiu/aac85c8baf201da8e39e56db374ad249...
CVE-2025-14565
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of the file /Profilers/SProfile/login1.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed fro...
CVE-2025-54981
creationtimestamp| type| source ---|---|--- 2025-12-12 15:22:43+00:00| seen| https://seclists.org/oss-sec/2025/q4/273 2025-12-12 16:10:00+00:00| seen| https://gist.github.com/Darkcrai86/247283b9c9cefdaa705ee34785f6a647 2025-12-12 16:40:13+00:00| seen|...
CVE-2025-66388
creationtimestamp| type| source ---|---|--- 2025-12-12 14:58:13+00:00| seen| https://seclists.org/oss-sec/2025/q4/270 2025-12-12 16:36:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7sjibnppw2e 2025-12-15 13:44:35+00:00| seen|...
CVE-2025-12841
creationtimestamp| type| source ---|---|--- 2025-12-12 11:13:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rxhk2xat2m 2025-12-12 11:15:55+00:00| seen| https://gist.github.com/Darkcrai86/ec7dbbcd699e57c904499a621ce6f55d 2025-12-12 11:39:49+00:00| seen|...
CVE-2025-14074
creationtimestamp| type| source ---|---|--- 2025-12-12 10:02:55+00:00| seen| https://gist.github.com/Darkcrai86/900a140889c5e02093dd95516d507e01 2025-12-12 11:11:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rxcm7vbx2y...
CVE-2025-13993
creationtimestamp| type| source ---|---|--- 2025-12-12 10:02:36+00:00| seen| https://gist.github.com/Darkcrai86/49c7536212a78bec751eb71b2d1df7f1 2025-12-12 11:38:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ryt6hmgj2r...
CVE-2025-67508
creationtimestamp| type| source ---|---|--- 2025-12-12 08:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rmtvx34c2u...
CVE-2025-67725
creationtimestamp| type| source ---|---|--- 2025-12-12 07:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rmkxia4i2y 2026-02-02 15:28:55+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdv5xgez6k2i...
CVE-2025-14068
creationtimestamp| type| source ---|---|--- 2025-12-12 07:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rk62ladp2c 2025-12-12 08:11:21+00:00| seen| https://gist.github.com/Darkcrai86/387740b3506022e31e89d3396a55e559 2025-12-12 09:39:36+00:00| seen|...
CVE-2025-13320
The WP User Manager plugin for WordPress is vulnerable to Arbitrary File Deletion in all versions up to, and including, 2.9.12. This is due to insufficient validation of user-supplied file paths in the profile update functionality combined with improper handling of array inputs by PHP's filterinp...
CVE-2025-13320
CVE-2025-13320 : WP User Manager for WordPress is vulnerable to Authenticated Arbitrary File Deletion via the current_user_avatar parameter in profile updates. The issue arises from insufficient validation of user-supplied file paths and improper handling of array inputs in PHP, enabling attacker...