Lucene search
+L

16690 matches found

CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in version 1.0 of the Sourcecodester Online ID Generator System, which stems from allowing the upload of arbitrary files and could lead to the executio...

5.1CVSS7.1AI score0.00258EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.7 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.9AI score0.00258EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.10 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

6.1AI score0.00246EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to incorrect manipulation of the...

5.4CVSS6AI score0.00273EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.15 views

PT-2025-16781 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue was found in the system, affecting the file /search/search stock.php. The manipulation of the Name argument leads to SQL injection. This iss...

8.8CVSS6.8AI score0.00525EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.10 views

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

9.6AI score0.00613EPSS
SaveExploits1References2
CVE
CVE
added 2025/04/16 12:00 a.m.66 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 is affected by a Stored Cross-Site Scripting (XSS) flaw in id_generator/classes/Users.php?f=save, triggered by the POST parameters firstname and lastname. Root cause is unescaped user input leading to script execution in the context of authenticated/u...

5.4CVSS6.4AI score0.00273EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/04/16 12:00 a.m.57 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 contains a SQL injection in the id parameter of id_generator/admin/?page=templates/manage_template&id=1. Root cause: improper handling of user input leading to SQL injection. Impact per available metrics is Confidentiality/Integrity/Availability Low w...

5.9CVSS8.3AI score0.00246EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.12 views

SourceCodester Web-based Pharmacy Product Management System 注入漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. An injection vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version 1.0, which results from SQL injection due to incorrect...

8.8CVSS6.8AI score0.00525EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/16 12:00 a.m.71 views

CVE-2025-29708

CVE-2025-29708 affects SourceCodester Company Website CMS 1.0. The vulnerability is a file upload flaw in the Create Services endpoint (/dashboard/Services) that could allow arbitrary file uploads due to improper validation. CVSS v3.1 base score 9.8 (network access, no authentication, user intera...

9.8CVSS6.7AI score0.00613EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

9.8CVSS7.4AI score0.00497EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.11 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

8.5AI score0.00497EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.13 views

PT-2025-16787 · Sourcecodester · Sourcecodester Online Id Generator System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online ID Generator System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achieved through the id...

5.1CVSS7.9AI score0.00258EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.12 views

PT-2025-16793 · Unknown · Sourcecodester Online Id Generator System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online ID Generator System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achievable through the id...

9.8CVSS7.3AI score0.00765EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.11 views

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from a Services feature that does not properly validate uploaded files, which could lead to arbitrary...

9.8CVSS6.8AI score0.00613EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.30 views

CVE-2025-29709

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...

0.00613EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from the vulnerability of files/dashboard/Services to cross-site scripting attacks...

6.1CVSS6.2AI score0.00298EPSS
SaveExploits1References3
CVE
CVE
added 2025/04/16 12:00 a.m.70 views

CVE-2024-40074

CVE-2024-40074 affects SourceCodester Online ID Generator System 1.0. The flaw is a Stored Cross-Site Scripting (XSS) vulnerability in id_generator/classes/SystemSettings.php?f=update_settings, with the point of vulnerability in the POST parameter short_name. CVSSv3.1 base score 4.8 (MEDIUM), net...

4.8CVSS6.1AI score0.00267EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2025/04/14 9:15 p.m.21 views

CVE-2025-3589

A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manageclass.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS0.00551EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/14 9:00 p.m.99 views

CVE-2025-3589

SourceCodester Music Class Enrollment System 1.0 is affected by a SQL injection in an unknown function of /manage_class.php caused by manipulation of the ID parameter. The issue can be exploited remotely, and public exploit information exists. Connected sources reiterate the vulnerability but do ...

9.8CVSS6.8AI score0.00551EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder