Lucene search
K

13 matches found

CNVD
CNVD
added 2025/06/27 12:0 a.m.1 views

Inventory Management System changeUsername.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /changeUsername.php. An attacker can exploit...

9.8CVSS7.9AI score0.00204EPSS
Exploits1References1
OSV
OSV
added 2025/06/22 12:15 p.m.0 views

CVE-2025-6474

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit ha...

9.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/06/22 11:31 a.m.9 views

CVE-2025-6474 code-projects Inventory Management System changeUsername.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit ha...

7.5CVSS0.00204EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/22 11:31 a.m.1 views

CVE-2025-6474 code-projects Inventory Management System changeUsername.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit ha...

7.5CVSS7.5AI score0.00204EPSS
Exploits1References5
CVE
CVE
added 2025/06/22 11:31 a.m.13 views

CVE-2025-6474

The CVE-2025-6474 entry concerns code-projects Inventory Management System 1.0 and the vulnerable file /changeUsername.php. Multiple connected reports confirm that the vulnerability is a SQL injection caused by unsafely handling the user_id parameter, enabling remote exploitation and potentially ...

9.8CVSS7.6AI score0.00204EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/06/22 12:0 a.m.1 views

Code-Projects Inventory Management System 注入漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /changeUsername.php. An attacker can exploit...

9.8CVSS8.2AI score0.00204EPSS
Exploits1References6
Prion
Prion
added 2023/03/17 8:15 a.m.12 views

Sql injection

A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file changeUsername.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

6.5CVSS9.6AI score0.00306EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/17 7:48 a.m.17 views

CVE-2023-1459 SourceCodester Canteen Management System changeUsername.php sql injection

A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file changeUsername.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

6.5CVSS9.9AI score0.00306EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/03/17 12:0 a.m.5 views

PT-2023-16997 · Sourcecodester · Sourcecodester Canteen Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System version 1.0 Description: A critical issue was found in the SourceCodester Canteen Management System, affecting some unknown functionality of the file changeUsername.php. The manipulation of the usernam...

9.8CVSS8.1AI score0.00306EPSS
Exploits1References6
OSV
OSV
added 2020/09/02 5:15 p.m.0 views

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

7.1CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2020/09/02 5:15 p.m.8 views

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

7.1CVSS6.9AI score0.00218EPSS
Exploits1References2
CVE
CVE
added 2020/09/02 4:6 p.m.29 views

CVE-2020-23830

CVE-2020-23830 documents a CSRF in the SourceCodester Stock Management System v1.0, specifically in changeUsername.php. An attacker can cause an authenticated user to have their username changed when the victim visits a third-party site, effectively denying future logins. The provided sources do ...

7.1CVSS6.9AI score0.00218EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/09/02 4:6 p.m.9 views

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

6.9AI score0.00218EPSS
Exploits1References2
Rows per page
Query Builder