Lucene search
K

16073 matches found

RedhatCVE
RedhatCVE
added 2025/11/21 3:17 a.m.8 views

CVE-2025-13450

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.4CVSS5.9AI score0.002EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/21 3:17 a.m.8 views

CVE-2025-13451

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

9.8CVSS7.2AI score0.00351EPSS
Exploits1References1
NVD
NVD
added 2025/11/20 3:17 p.m.2 views

CVE-2025-13451

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

9.8CVSS0.00351EPSS
Exploits1References5
NVD
NVD
added 2025/11/20 3:17 p.m.6 views

CVE-2025-13450

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.4CVSS0.002EPSS
Exploits1References5
NVD
NVD
added 2025/11/20 3:17 p.m.14 views

CVE-2025-13468

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function deleteforum/deletecareer/deletecomment/deletegallery/deleteevent of the file admin/adminclass.php of the component Delete Handler. Executing manipulation of the argument ID can lead to...

8.1CVSS0.0033EPSS
Exploits1References5
OSV
OSV
added 2025/11/20 3:17 p.m.2 views

CVE-2025-13468

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function deleteforum/deletecareer/deletecomment/deletegallery/deleteevent of the file admin/adminclass.php of the component Delete Handler. Executing manipulation of the argument ID can lead to...

8.1CVSS5.6AI score0.0033EPSS
Exploits1References5
OSV
OSV
added 2025/11/20 3:17 p.m.4 views

CVE-2025-13451

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

9.8CVSS5.8AI score0.00351EPSS
Exploits1References5
OSV
OSV
added 2025/11/20 3:17 p.m.3 views

CVE-2025-13450

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.4CVSS4.3AI score0.002EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/20 1:32 p.m.11 views

CVE-2025-13468 SourceCodester Alumni Management System Delete admin_class.php delete_event authorization

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function deleteforum/deletecareer/deletecomment/deletegallery/deleteevent of the file admin/adminclass.php of the component Delete Handler. Executing manipulation of the argument ID can lead to...

5.5CVSS0.0033EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/20 3:2 a.m.10 views

CVE-2025-13451 SourceCodester Online Shop Project action.php sql injection

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

7.5CVSS0.00351EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/20 3:2 a.m.1 views

CVE-2025-13451 SourceCodester Online Shop Project action.php sql injection

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

7.5CVSS6.8AI score0.00351EPSS
Exploits1References5
CVE
CVE
added 2025/11/20 3:2 a.m.14 views

CVE-2025-13451

Summary: CVE-2025-13451 affects SourceCodester Online Shop Project 1.0. The vulnerability is an SQL injection in an unknown function within the file /action.php, triggered by manipulation of the Search argument. The issue can be exploited remotely and the exploit appears to be publicly available....

9.8CVSS7.3AI score0.00351EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/11/20 3:2 a.m.4 views

EUVD-2025-198249

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

7.5CVSS6.7AI score0.00351EPSS
Exploits1References6
EUVD
EUVD
added 2025/11/20 3:2 a.m.4 views

EUVD-2025-198250

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.1CVSS5.4AI score0.002EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/11/20 3:2 a.m.23 views

CVE-2025-13450 SourceCodester Online Shop Project register.php cross site scripting

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.1CVSS0.002EPSS
Exploits1References5
CVE
CVE
added 2025/11/20 3:2 a.m.13 views

CVE-2025-13450

CVE-2025-13450 affects SourceCodester Online Shop Project 1.0. A vulnerability in the file /shop/register.php, via manipulation of the f_name argument, enables cross-site scripting. The flaw can be triggered remotely, and the exploit has been publicly disclosed. Several feeds (NVD, Red Hat, CVE l...

5.4CVSS3.8AI score0.002EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.4 views

PT-2025-47574

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete forum/delete career/delete comment/delete gallery/delete event of the file admin/admin class.php of the component Delete Handler. Executing manipulation of the argument ID can lea...

5.5CVSS5.5AI score0.0033EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.5 views

PT-2025-47553

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

5.1CVSS5.9AI score0.002EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.2 views

SourceCodester Online Shop Project 安全漏洞

SourceCodester Online Shop Project is a SourceCodester open source online store project. A security vulnerability exists in SourceCodester Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter Search in the file /action.php, which could lead to a SQL injecti...

9.8CVSS7.7AI score0.00351EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.4 views

SourceCodester Online Shop Project 安全漏洞

SourceCodester Online Shop Project is a SourceCodester open source online store project. A security vulnerability exists in SourceCodester Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /shop/register.php, and could lead to a...

5.4CVSS4.4AI score0.002EPSS
Exploits1References5
Rows per page
Query Builder