Lucene search
+L

177 matches found

Vulnrichment
Vulnrichment
added 2025/08/14 6:2 p.m.4 views

CVE-2025-8973 SourceCodester Cashier Queuing System Actions.php sql injection

A vulnerability has been found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the file /Actions.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

7.5CVSS7.6AI score0.00421EPSS
Exploits1References5
CVE
CVE
added 2025/08/14 6:2 p.m.26 views

CVE-2025-8973

Summary: CVE-2025-8973 affects SourceCodester Cashier Queuing System 1.0. Affected component: the unknown function in the file /Actions.php where manipulating the Username argument leads to a SQL injection. The vulnerability appears exploitable remotely and has public disclosure. Root cause: impr...

9.8CVSS7.6AI score0.00421EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/14 6:2 p.m.19 views

CVE-2025-8973 SourceCodester Cashier Queuing System Actions.php sql injection

A vulnerability has been found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the file /Actions.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

7.5CVSS0.00421EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.7 views

SourceCodester Cashier Queuing System SQL注入漏洞

SourceCodester Cashier Queuing System is an open source cashier queuing system from SourceCodester. A security vulnerability exists in SourceCodester Cashier Queuing System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Username in the file...

9.8CVSS7.7AI score0.00421EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.15 views

PT-2025-33359 · Sourcecodester · Sourcecodester Cashier Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A SQL injection issue exists in SourceCodester Cashier Queuing System 1.0 due to the manipulation of the Username argument in the /Actions.php file. This allows for remote...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/05/23 8:0 a.m.9 views

CVE-2024-6273

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function savepatient of the file patientside.php. The manipulation of the argument Full Name/Contact/Address leads to cross site scripting. The attack...

6.9CVSS6AI score0.006EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:26 a.m.6 views

CVE-2024-0265

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component GET Parameter Handler. The manipulation of the argument page leads to file inclusion. The attack may be initiate...

8.8CVSS6.8AI score0.20938EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.6 views

CVE-2023-26857

An arbitrary file upload vulnerability in /admin/ajax.php?action=saveuploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS7.9AI score0.0095EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:15 a.m.9 views

CVE-2023-26856

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login...

7.2CVSS8.4AI score0.00726EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:6 a.m.8 views

CVE-2022-46952

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuser...

7.2CVSS8.3AI score0.00821EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 12:24 a.m.11 views

CVE-2022-46951

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuploads...

7.2CVSS8.3AI score0.00821EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:24 a.m.8 views

CVE-2022-46950

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletewindow...

7.2CVSS8.3AI score0.00821EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:24 a.m.13 views

CVE-2022-46956

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

7.2CVSS8.3AI score0.00804EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:24 a.m.13 views

CVE-2022-46953

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=savewindow...

7.2CVSS8.3AI score0.00821EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 12:24 a.m.12 views

CVE-2022-46954

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...

9.8CVSS8.3AI score0.00602EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 12:19 a.m.9 views

CVE-2022-47790

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display=...

9.8CVSS8.1AI score0.00752EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:16 a.m.12 views

CVE-2022-45275

An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=savesettings of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS7.9AI score0.15323EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:8 p.m.10 views

CVE-2022-3581

A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS6.4AI score0.00335EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:8 p.m.12 views

CVE-2022-3580

A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

6.1CVSS6.3AI score0.00335EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:2 p.m.9 views

CVE-2022-3579

A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...

9.8CVSS7.5AI score0.00649EPSS
Exploits1References1
Rows per page
Query Builder