Lucene search
+L

16696 matches found

CNNVD
CNNVD
added 2025/04/16 12:00 a.m.11 views

Sourcecodester Online ID Generator System 安全漏洞

Sourcecodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in version 1.0 of the Sourcecodester Online ID Generator System, which stems from allowing the upload of arbitrary files and could lead to the executio...

9.8CVSS7.1AI score0.00765EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.19 views

PT-2025-16782 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /edit-product.php. The manipulation of the ID argument leads to SQL...

8.8CVSS6.8AI score0.00525EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.17 views

PT-2025-16898 · Unknown · Sourcecodester Simple Hotel Booking System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Hotel Booking System version 1.0 Description: A critical vulnerability was found in the Login function, where the manipulation of the uname argument leads to a buffer overflow. This issue can be exploited on the local...

7.8CVSS5.2AI score0.00335EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.9 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.3AI score0.00273EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.34 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

0.00267EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.6 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to misuse of the parameter shortnam...

4.8CVSS6AI score0.00267EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.12 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

8.4AI score0.00765EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.28 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

0.00258EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.10 views

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from the portfolio feature not properly validating uploaded files, which could result in arbitrary fil...

9.8CVSS6.9AI score0.00613EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.12 views

PT-2025-16893 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue is related to Cross Site Scripting XSS via the /dashboard/Services API endpoint. This allows for potential malicious script injection. No information is provided about the...

6.1CVSS5.9AI score0.00298EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

5.9CVSS7.4AI score0.00246EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.48 views

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

0.00613EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.26 views

SourceCodester Web-based Pharmacy Product Management System 注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system . An injection vulnerability exists in the SourceCodester Web-based Pharmacy Product Management System version 1.0, which results from SQL injection due to...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/16 12:00 a.m.70 views

CVE-2025-29710

CVE-2025-29710 - SourceCodester Company Website CMS 1.0 suffers a Cross Site Scripting (XSS) vulnerability in the /dashboard/Services API endpoint. The PT-2025-16893 entry specifies that the issue is related to the /dashboard/Services endpoint and allows potential malicious script injection, affe...

6.1CVSS5.8AI score0.00298EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2025/04/16 12:00 a.m.72 views

CVE-2025-29709

The CVE-2025-29709 entry concerns SourceCodester Company Website CMS 1.0, where the file upload feature under the Create portfolio path (/dashboard/portfolio) is vulnerable. The root cause is improper validation of uploaded files, enabling arbitrary file uploads. Documented impact indicates poten...

9.8CVSS6.7AI score0.00613EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.11 views

CVE-2025-29709

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...

9.6AI score0.00613EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.34 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

0.00497EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.10 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

8.5AI score0.00497EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.31 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

0.00497EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.32 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

0.00246EPSS
SaveExploits1References1
Rows per page
Query Builder