Lucene search
+L

133 matches found

CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•17 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the paramete...

9.8CVSS7.8AI score0.00608EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/06/09 6:09 p.m.•18 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.1AI score0.00462EPSS
SaveExploits2References1
NVD
NVD
•added 2025/06/07 6:15 p.m.•27 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS0.00462EPSS
SaveExploits2References5
CVE
CVE
•added 2025/06/07 6:00 p.m.•92 views

CVE-2025-5840

SourceCodester Client Database Management System 1.0 contains a vulnerability in the file /user_update_customer_order.php where the uploaded_file parameter can be manipulated to achieve unrestricted file upload. This remote-access flaw could allow an attacker to upload arbitrary files, potentiall...

7.5CVSS7AI score0.00462EPSS
SaveExploits2References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/07 6:00 p.m.•15 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.2AI score0.00462EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2025/06/07 12:00 a.m.•14 views

SourceCodester Client Database Management System 代码问题漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which is caused by incorrect manipulation of the parameter uploadedfile in the fil...

7.5CVSS7.4AI score0.00462EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/07 12:00 a.m.•3 views

CVE-2025-5840: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7AI score0.00462EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/30 12:49 p.m.•31 views

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS7.1AI score0.00627EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/28 10:47 p.m.•39 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS7.3AI score0.00423EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/28 12:00 p.m.•77 views

CVE-2025-5299

CVE-2025-5299 affects SourceCodester Client Database Management System v1.0. The vulnerability is in the file /user_order_customer_update.php, where manipulating the argument uploaded_file_cancelled enables unrestricted file upload. Exploitation is possible remotely and exploits have been disclos...

7.5CVSS7.3AI score0.00627EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/28 12:00 a.m.•3 views

CVE-2025-5299: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS6.9AI score0.00627EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•16 views

SourceCodester Client Database Management System 代码问题漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which stems from improper handling of the uploadedfilecancelled parameter in the...

7.5CVSS7.6AI score0.00627EPSS
SaveExploits1References6
NVD
NVD
•added 2025/05/26 10:15 p.m.•24 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS0.00423EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/26 10:00 p.m.•87 views

CVE-2025-5207

CVE-2025-5207 affects SourceCodester Client Database Management System 1.0. The vulnerability is an SQL injection in the file /superadmin_update_profile.php triggered by manipulating the nickname/email parameters, potentially exploitable remotely. Multiple connected sources corroborate the issue’...

9.8CVSS5.2AI score0.00423EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/26 10:00 p.m.•12 views

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

5.8CVSS7.3AI score0.00423EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/26 10:00 p.m.•44 views

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

5.8CVSS0.00423EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•6 views

CVE-2025-5207: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS5.3AI score0.00423EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•14 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

9.8CVSS5.7AI score0.00423EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/05/26 12:00 a.m.•20 views

PT-2025-22937 · Unknown · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Client Database Management System. The issue affects an unknown functionality of the file /superadmin upda...

9.8CVSS5.4AI score0.00423EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/05/21 8:59 a.m.•37 views

CVE-2025-4924

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /uservoidtransaction.php. The manipulation of the argument orderid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS7.7AI score0.0048EPSS
SaveExploits0
Rows per page
Query Builder