Lucene search
+L

18 matches found

NVD
NVD
•added 2026/10/13 7:16 a.m.•21 views

CVE-2026-108975

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS0.00288EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 6:45 a.m.•40 views

CVE-2026-108975 SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS0.00288EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 6:45 a.m.•24 views

CVE-2026-108975

The SourceCodester Library Management System 1.0 contains a security flaw in the admin/add_admin.php file, specifically affecting the move_uploaded_file function. By manipulating the image argument, an attacker can achieve unrestricted upload of files. This vulnerability can be initiated remotely...

7.5CVSS6.9AI score0.00288EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 6:45 a.m.•14 views

EUVD-2026-98315

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS6.9AI score0.00288EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-108975: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS6.9AI score0.00288EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/12 8:16 a.m.•19 views

CVE-2026-4013

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown function of the file addadmin.php. Such manipulation leads to improper authorization. The attack may be launched remotely...

6.5CVSS0.00228EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/12 8:02 a.m.•66 views

CVE-2026-4013 SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown function of the file addadmin.php. Such manipulation leads to improper authorization. The attack may be launched remotely...

6.5CVSS0.00228EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/12 8:02 a.m.•36 views

CVE-2026-4013

CVE-2026-4013 affects SourceCodester Web-based Pharmacy Product Management System 1.0. The vulnerability is tied to an issue in an unknown function of the file add_admin.php, enabling improper authorization and potentially allowing remote exploitation. The CVSS metrics indicate a MEDIUM severity ...

6.5CVSS6.3AI score0.00228EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/12 12:00 a.m.•7 views

CVE-2026-4013: Improper Authorization

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown function of the file addadmin.php. Such manipulation leads to improper authorization. The attack may be launched remotely...

6.5CVSS6.4AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 8:02 a.m.•67 views

CVE-2026-0701 code-projects Intern Membership Management System add_admin.php sql injection

A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

5.8CVSS0.00366EPSS
SaveExploits1References6
CVE
CVE
•added 2026/01/08 8:02 a.m.•73 views

CVE-2026-0701

The CVE-2026-0701 issue affects code-projects Intern Membership Management System 1.0, specifically the file /intern/admin/add_admin.php where manipulating the Username parameter enables SQL injection. This is described as remotely exploitable, with exploits publicly available. Connected sources ...

7.2CVSS5.4AI score0.00366EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•7 views

CVE-2026-0701: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

7.2CVSS5.4AI score0.00366EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/30 8:16 p.m.•22 views

CVE-2025-15354

A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/addadmin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/30 8:02 p.m.•37 views

CVE-2025-15354

The CVE-2025-15354 vulnerability affects itsourcecode Society Management System 1.0. The flaw exists in the /admin/add_admin.php file, where manipulation of the Username parameter can lead to SQL injection. Attacks can be launched remotely over the network, and exploits have been published and ma...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•10 views

CVE-2025-15354: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/addadmin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/03 11:00 a.m.•36 views

CVE-2024-3253 SourceCodester Internship Portal Management System add_admin.php sql injection

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

6.5CVSS7.5AI score0.00706EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•11 views

CVE-2024-3253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

7.2CVSS5.5AI score0.00706EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/06 12:00 a.m.•9 views

CVE-2022-1248: Improper Authentication

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAPInformationSystem/controllers/addadmin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploi...

7.5CVSS6.9AI score0.01353EPSS
SaveExploits2References3
Rows per page
Query Builder