Lucene search
+L

2947 matches found

CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•20 views

Code-Projects Blog Site 授权问题漏洞

Blog Site is a blogging system. Blog Site suffers from an improper authorization vulnerability that originates in the file /admin.php, which can be exploited by an attacker to compromise confidentiality, integrity, and availability...

8.8CVSS6.7AI score0.00285EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•3 views

CVE-2025-57310: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits3References1
CVE
CVE
•added 2025/11/10 5:02 a.m.•32 views

CVE-2025-12932

CVE-2025-12932 affects SourceCodester Baby Care System 1.0. The vulnerability exists in the admin functionality, specifically the /admin.php?id=inbox endpoint, where improper handling of the message identifier (msgid) enables a SQL injection. The issue can be triggered remotely and is supported b...

9.8CVSS5.4AI score0.00335EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•4 views

CVE-2025-12932: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

9.8CVSS5.6AI score0.00335EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/28 12:15 a.m.•21 views

CVE-2025-12332

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS0.00382EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/10/28 12:00 a.m.•28 views

SourceCodester Student Grades Management System 代码注入漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A code injection vulnerability exists in SourceCodester Student Grades Management System version 1.0, which originates from a cross-site scripting vulnerability in the deleteuser...

4.8CVSS4.4AI score0.00382EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/28 12:00 a.m.•3 views

CVE-2025-12332: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS3.8AI score0.00382EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/25 12:00 a.m.•2 views

CVE-2025-12095: Cross-Site Request Forgery (CSRF)

The Simple Registration for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.8. This is due to missing nonce validation on the role requests admin page handler in the includes/display-role-admin.php file. This makes it possible...

8.8CVSS5.5AI score0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/08 5:02 p.m.•24 views

CVE-2025-11485 SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS3.8AI score0.00295EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2011-1484

Malware in sbrugna...

7.5CVSS6.4AI score0.01154EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2021-18191

Malware in sbrugna...

6.1CVSS6.3AI score0.00406EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-13506

Malware in sbrugna...

6.1CVSS6.3AI score0.00514EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2015-1510

Malware in sbrugna...

4.3CVSS6.4AI score0.03232EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2012-6469

Malware in sbrugna...

4.3CVSS6.4AI score0.01976EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-17125

Malware in sbrugna...

9.8CVSS9.5AI score0.01505EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2001-1501

Malware in sbrugna...

4.3CVSS6.4AI score0.02013EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2001-0837

Malware in sbrugna...

5CVSS6.4AI score0.01481EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2004-2434

Malware in sbrugna...

7.5CVSS6.4AI score0.08848EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2004-1656

Malware in sbrugna...

5CVSS6.4AI score0.0155EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2005-3549

Malware in sbrugna...

5CVSS6.4AI score0.06278EPSS
SaveExploits1References5
Rows per page
Query Builder