Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/02/19 1:28 a.m.•21 views

CVE-2025-70141

SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in adminclass.php based on the action parameter. An unauthenticated remote attacke...

9.4CVSS5.6AI score0.00703EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/18 5:21 p.m.•16 views

CVE-2025-70141

SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in adminclass.php based on the action parameter. An unauthenticated remote attacke...

9.4CVSS5.9AI score0.00703EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/18 5:21 p.m.•28 views

CVE-2025-70141

SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in adminclass.php based on the action parameter. An unauthenticated remote attacke...

9.4CVSS0.00703EPSS
SaveExploits1References3
CVE
CVE
•added 2026/02/18 12:00 a.m.•40 views

CVE-2025-70141

The SourceCodester Customer Support System 1.0 is vulnerable to an incorrect access control flaw in the ajax.php file. The AJAX dispatcher fails to enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parameter. This allows an unaut...

9.4CVSS6AI score0.00703EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/18 12:00 a.m.•21 views

PT-2026-20464

SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin class.php based on the action parameter. An unauthenticated remote attack...

5.6AI score0.00703EPSS
SaveExploits1References3
Rows per page
Query Builder