Lucene search
+L

16694 matches found

Vulnrichment
Vulnrichment
added 2025/05/09 7:00 a.m.12 views

CVE-2025-4470 SourceCodester Online Student Clearance System add-student.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be...

4.8CVSS3.5AI score0.00601EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/09 7:00 a.m.33 views

CVE-2025-4470 SourceCodester Online Student Clearance System add-student.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be...

4.8CVSS0.00601EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/09 7:00 a.m.12 views

CVE-2025-4469 SourceCodester Online Student Clearance System add-admin.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...

4.8CVSS4.3AI score0.00601EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/09 7:00 a.m.73 views

CVE-2025-4469

SourceCodester Online Student Clearance System 1.0 is affected by CVE-2025-4469 in the /admin/add-admin.php file. The vulnerability arises from manipulation of parameters txtusername, txtfullname, txtpassword, and txtpassword2, enabling cross-site scripting and allowing remote exploitation. Multi...

5.4CVSS4AI score0.00601EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/09 7:00 a.m.35 views

CVE-2025-4469 SourceCodester Online Student Clearance System add-admin.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...

4.8CVSS0.00601EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/09 6:31 a.m.11 views

CVE-2025-4468 SourceCodester Online Student Clearance System edit-photo.php unrestricted upload

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. Th...

7.5CVSS7.3AI score0.01151EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/09 6:31 a.m.35 views

CVE-2025-4468 SourceCodester Online Student Clearance System edit-photo.php unrestricted upload

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. Th...

7.5CVSS0.01151EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/09 6:31 a.m.35 views

CVE-2025-4467 SourceCodester Online Student Clearance System edit-admin.php sql injection

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...

7.5CVSS0.00987EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/09 6:31 a.m.9 views

CVE-2025-4467 SourceCodester Online Student Clearance System edit-admin.php sql injection

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...

7.5CVSS8.8AI score0.00987EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/09 6:31 a.m.77 views

CVE-2025-4467

CVE-2025-4467 affects the SourceCodester Online Student Clearance System 1.0. The vulnerability lies in the file /admin/edit-admin.php where manipulating the parameters id, txtfullname, txtemail, and cmddesignation enables SQL injection. This can be exploited remotely, and public disclosures exis...

9.8CVSS8.1AI score0.00987EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.12 views

SourceCodester Online Student Clearance System 注入漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. SourceCodester Online Student Clearance System version 1.0 has an injection vulnerability, the vulnerability stems from the parameter txtfullname/txtemail/cmddesignation operation in t...

9.8CVSS7.8AI score0.00987EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.41 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

0.00401EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/09 12:00 a.m.78 views

CVE-2025-46190

CVE-2025-46190 affects SourceCodester Client Database Management System 1.0, with a SQL Injection vulnerability in the file user_delivery_update.php exploitable via the POST parameter order_id . The CVE has a high impact (CVSS 3.1: 9.8, CRITICAL) with network attack vector, no privileges required...

9.8CVSS8.1AI score0.00401EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.11 views

SourceCodester Online Student Clearance System 安全漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A security vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from an unrestricted upload due to the userImage action in the parameter...

9.8CVSS7.5AI score0.01151EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.43 views

CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

0.01092EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.11 views

PT-2025-20576

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...

9.8CVSS7.5AI score0.00499EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.10 views

PT-2025-20526 · Sourcecodester · Sourcecodester Online Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Clearance System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Student Clearance System. This issue affects unknown code in the file /admin/edit-admin.php. The...

9.8CVSS7.6AI score0.00987EPSS
SaveExploits1References13
Vulnrichment
Vulnrichment
added 2025/05/09 12:00 a.m.12 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

7.6AI score0.00401EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.27 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

0.00499EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/05/09 12:00 a.m.29 views

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

0.00401EPSS
SaveExploits0References2
Rows per page
Query Builder