Lucene search
+L

420 matches found

CNNVD
CNNVD
•added 2025/07/09 12:00 a.m.•19 views

Code-Projects Fabian Ros Library Management System 代码问题漏洞

Code-Projects Fabian Ros Library Management System is an open source library management system from Code-Projects. A code issue vulnerability exists in Code-Projects Fabian Ros Library Management System version 2.0, which originates from an unrestricted upload of the photo parameter in the...

8.8CVSS6.7AI score0.00448EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/07/07 9:15 p.m.•21 views

CVE-2025-7144

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site...

4.8CVSS3.6AI score0.00359EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/07 8:32 p.m.•69 views

CVE-2025-7144

CVE-2025-7144 affects SourceCodester Best Salon Management System 1.0. The vulnerability is a cross-site scripting in the file /panel/admin-profile.php , caused by manipulation of the Admin Name parameter. Exploitation can be performed remotely , and multiple sources note that the exploit has bee...

4.8CVSS3.5AI score0.00359EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/07/07 8:32 p.m.•35 views

CVE-2025-7144 SourceCodester Best Salon Management System Admin Profile Page admin-profile.php cross site scripting

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site...

4.8CVSS0.00359EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/07/07 6:15 p.m.•15 views

CVE-2025-7138

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...

8.8CVSS5.8AI score0.00451EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/07 5:32 p.m.•33 views

CVE-2025-7138 SourceCodester Best Salon Management System admin-profile.php sql injection

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...

6.5CVSS0.00451EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/07/07 12:15 p.m.•19 views

CVE-2025-7126

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be...

7.2CVSS5.7AI score0.00448EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•18 views

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. SourceCodester Best Salon Management System version 1.0 suffers from an injection vulnerability that stems from improper handling of the parameter adminname in the file /panel/admin-profile.php,...

8.8CVSS7AI score0.00451EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•17 views

SourceCodester Best Salon Management System 安全漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which originates from an incorrect manipulation of the parameter Admin Name in the file...

4.8CVSS3.7AI score0.00359EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•8 views

CVE-2025-7144: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site...

4.8CVSS3.8AI score0.00359EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/07 12:00 a.m.•22 views

PT-2025-28266 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A vulnerability has been found in the Admin Profile Page component, specifically affecting the file /panel/admin-profile.php. The manipulation of the Admin Name argument lea...

4.8CVSS3.2AI score0.00359EPSS
SaveExploits1References8
osv_cve
osv_cve
•added 2025/06/30 4:15 p.m.•17 views

CVE-2025-6913

A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument aemailid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS5.8AI score0.00397EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•20 views

PHPGurukul Student Record System 注入漏洞

PHPGurukul Student Record System is an application from PHPGurukul Inc. An injection vulnerability exists in PHPGurukul Student Record System version 3.2, which results from SQL injection due to incorrect manipulation of parameter aemailid in file /admin-profile.php...

8.8CVSS6.9AI score0.00397EPSS
SaveExploits1References6
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•18 views

Directory Management System admin-profile.php File SQL Injection Vulnerability

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname in the file /admin/admin-profile.php. An attacker can...

8.8CVSS8.3AI score0.00397EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•25 views

Bus Pass Management System admin-profile.php file cross-site scripting vulnerability

Bus Pass Management System is a bus pass management system. Bus Pass Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the profile name parameter in the file /admin/admin-profile.php, which can...

5.4CVSS4.1AI score0.00284EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/20 11:15 a.m.•18 views

CVE-2025-6333

A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.7AI score0.00397EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/20 10:31 a.m.•47 views

CVE-2025-6333

PHPGurukul Directory Management System 2.0 contains a SQL injection in /admin/admin-profile.php via the adminname parameter. Exploitation is remote; multiple sources describe the issue as critical with potential to access or corrupt data. Connected documents consistently identify the vulnerabilit...

8.8CVSS6.4AI score0.00397EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/06/20 1:15 a.m.•19 views

CVE-2025-6288

A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross...

5.4CVSS3.8AI score0.00284EPSS
SaveExploits0References4
CVE
CVE
•added 2025/06/20 12:00 a.m.•37 views

CVE-2025-6288

The CVE-2025-6288 entry affects PHPGurukul Bus Pass Management System v1.0, specifically the Profile Page component: /admin/admin-profile.php. The vulnerability arises from improper handling of the profile name argument, leading to cross-site scripting (XSS). Documents indicate this can be exploi...

5.4CVSS3.6AI score0.00284EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/06/20 12:00 a.m.•40 views

CVE-2025-6288 PHPGurukul Bus Pass Management System Profile Page admin-profile.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross...

4.8CVSS0.00284EPSS
SaveExploits0References4
Rows per page
Query Builder