Lucene search
K

16073 matches found

Cvelist
Cvelist
added 2025/11/23 6:32 p.m.12 views

CVE-2025-13564 SourceCodester Pre-School Management System FilehelperController.php removefile denial of service

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out...

5.5CVSS0.00322EPSS
Exploits1References5
EUVD
EUVD
added 2025/11/23 6:30 p.m.3 views

EUVD-2025-198580

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

7.5CVSS6.6AI score0.00339EPSS
Exploits1References6
EUVD
EUVD
added 2025/11/23 6:30 p.m.5 views

EUVD-2025-198577

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS6.6AI score0.00339EPSS
Exploits1References6
OSV
OSV
added 2025/11/23 6:15 p.m.3 views

CVE-2025-13561

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

9.8CVSS5.7AI score0.00339EPSS
Exploits1References5
NVD
NVD
added 2025/11/23 6:15 p.m.5 views

CVE-2025-13561

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

9.8CVSS0.00339EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/23 5:32 p.m.13 views

CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

7.5CVSS0.00339EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/23 5:32 p.m.7 views

CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

7.5CVSS6.8AI score0.00339EPSS
Exploits1References5
CVE
CVE
added 2025/11/23 5:32 p.m.12 views

CVE-2025-13561

This CVE concerns SourceCodester Company Website CMS 1.0. The vulnerability exists in the /admin/index.php code where manipulation of the Username parameter enables SQL injection. Remote exploitation is possible, and public exploit disclosure is noted. Multiple connected sources corroborate the i...

9.8CVSS7.3AI score0.00339EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/11/23 5:15 p.m.3 views

CVE-2025-13560

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

9.8CVSS0.00339EPSS
Exploits1References5
OSV
OSV
added 2025/11/23 5:15 p.m.2 views

CVE-2025-13560

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

9.8CVSS5.7AI score
Exploits0References5
Cvelist
Cvelist
added 2025/11/23 5:2 p.m.11 views

CVE-2025-13560 SourceCodester Company Website CMS reset-password.php sql injection

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS0.00339EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/23 5:2 p.m.3 views

CVE-2025-13560 SourceCodester Company Website CMS reset-password.php sql injection

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS6.8AI score0.00339EPSS
Exploits1References5
CVE
CVE
added 2025/11/23 5:2 p.m.10 views

CVE-2025-13560

CVE-2025-13560 affects SourceCodester Company Website CMS 1.0. The vulnerability is a SQL injection in the /admin/reset-password.php file triggered by manipulating the email parameter, with remote exploitable conditions and a publicly released exploit. Multiple sources (NVD/Red Hat/CVE records) a...

9.8CVSS7.2AI score0.00339EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.5 views

PT-2025-47852

Name of the Vulnerable Software and Affected Versions SourceCodester Company Website CMS version 1.0 Description A SQL injection issue exists due to the manipulation of the email argument in the '/admin/reset-password.php' file. This allows for remote attacks. The exploit has been publicly...

9.8CVSS7.6AI score0.00339EPSS
Exploits1References12
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.2 views

SourceCodester Company Website CMS SQL注入漏洞

SourceCodester Company Website CMS is a SourceCodester open source content management system. A SQL injection vulnerability exists in SourceCodester Company Website CMS version 1.0, which originates from the incorrect operation of the parameter email in the file /admin/reset-password.php, which m...

9.8CVSS7.9AI score0.00339EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.3 views

SourceCodester Pre-School Management System 安全漏洞

SourceCodester Pre-School Management System is a SourceCodester open source preschool management system. A security vulnerability exists in SourceCodester Pre-School Management System version 1.0, which originates from a misbehavior of the function removefile with respect to the parameter filepat...

7.1CVSS5.4AI score0.00322EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.2 views

SourceCodester Company Website CMS SQL注入漏洞

SourceCodester Company Website CMS is a SourceCodester open source content management system. A SQL injection vulnerability exists in SourceCodester Company Website CMS version 1.0, which originates from the incorrect operation of the parameter Username in the file /admin/index.php, which may lea...

9.8CVSS7.8AI score0.00339EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.6 views

PT-2025-47857

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out...

5.5CVSS6.7AI score0.00322EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.4 views

PT-2025-47858

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made...

6.9CVSS6.7AI score0.00414EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/21 1:34 p.m.4 views

CVE-2025-13468

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function deleteforum/deletecareer/deletecomment/deletegallery/deleteevent of the file admin/adminclass.php of the component Delete Handler. Executing manipulation of the argument ID can lead to...

8.1CVSS6.8AI score0.0033EPSS
Exploits1References1
Rows per page
Query Builder