Lucene search
+L

36 matches found

NVD
NVD
•added 2026/04/30 1:16 a.m.•18 views

CVE-2026-7447

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/updatecustomer.php. This manipulation of the argument type/length/business parameter validity causes sql injection. The attack is possible to be carried out...

6.5CVSS0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/29 3:45 p.m.•8 views

CVE-2026-7390 SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is no...

5.1CVSS3.9AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/11/03 6:31 p.m.•14 views

EUVD-2025-37496

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS5.7AI score0.00297EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/03 4:15 p.m.•20 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS0.00297EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/03 12:00 a.m.•30 views

CVE-2025-63447

The Water Management System v1.0 , an inventory management system developed by Dikshant Naik, is vulnerable to Cross-Site Scripting (XSS) . The root cause is a failure to properly neutralize input within the /add_customer.php endpoint. This vulnerability allows an attacker to inject malicious scr...

6.1CVSS5.8AI score0.00297EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/11/03 12:00 a.m.•26 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

0.00297EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/10 1:32 a.m.•17 views

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

9.4CVSS8AI score0.00381EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•19 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /customer/index.php, which could lead to a SQL injection...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/08 10:15 a.m.•16 views

CVE-2025-11469

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...

9.8CVSS0.0035EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•15 views

PT-2025-41242

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. Manipulation of the Contact argument in an unknown function within the /pages/save customer.php fil...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/10/07 11:23 a.m.•11 views

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.5AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/06 11:02 a.m.•24 views

CVE-2025-11333

CVE-2025-11333 affects langleyfcu Online Banking System up to version 57437e6400ce0ae240e692c24e6346b8d0c17d7a, specifically the Add Customer Page file /customer_add_action.php. The vulnerability arises from manipulation of the First Name parameter, causing cross-site scripting. Remote exploitati...

4.8CVSS5.2AI score0.00267EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/06 11:02 a.m.•34 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS0.00267EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/06 11:02 a.m.•3 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.2AI score0.00267EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•2 views

CVE-2025-11333: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS4AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•10 views

PT-2025-40890

Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a Description A security issue exists in the langleyfcu Online Banking System. The manipulation of the First Name argument in the /customer add action.ph...

4.8CVSS2.5AI score0.00267EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•12 views

Langley Online Banking System 代码注入漏洞

Langley Online Banking System is an online banking system from Langley Corporation. A code injection vulnerability exists in the Langley Online Banking System that originates from an incorrect manipulation of the First Name parameter in the file /customeraddaction.php in the Add Customer Page...

4.8CVSS4AI score0.00267EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-30810

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00381EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-32976

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00438EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/22 4:15 p.m.•17 views

CVE-2025-10804

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploi...

8.8CVSS0.00381EPSS
SaveExploits1References5
Rows per page
Query Builder