Lucene search
+L

34 matches found

Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•25 views

PT-2026-83611

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add customer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

5.3CVSS4.6AI score0.0047EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•25 views

PT-2026-36031

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update customer.php. This manipulation of the argument type/length/business parameter validity causes sql injection. The attack is possible to be carried out...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-23414

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00601EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-34312

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00549EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•4 views

CVE-2025-10804: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploi...

8.8CVSS5.6AI score0.00381EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/06/24 10:31 p.m.•27 views

CVE-2025-6581 SourceCodester Best Salon Management System add-customer.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

6.5CVSS0.00452EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•2 views

CVE-2025-6581: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•14 views

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. SourceCodester Best Salon Management System version 1.0 has an injection vulnerability , the vulnerability stems from the add-customer.php file on the parameters...

8.8CVSS7AI score0.00452EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/23 10:12 a.m.•16 views

CVE-2024-3614

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument namacustomer/alamatcustomer/notelpcustomer leads to cross site scripting. It is possible to initiate...

5.4CVSS6.2AI score0.00589EPSS
SaveExploits1
CVE
CVE
•added 2025/04/06 8:00 a.m.•83 views

CVE-2025-3313

CVE-2025-3313 affects PHPGurukul Men Salon Management System 1.0. The vulnerability is in an unknown function of the file /admin/add-customer.php, where manipulation of the Name parameter leads to SQL injection. It is described as exploitable remotely, with the exploit disclosed publicly. The con...

9.8CVSS7.5AI score0.00555EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/06 12:00 a.m.•3 views

CVE-2025-3313: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS6.9AI score0.00555EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/25 12:00 a.m.•2 views

CVE-2024-11648: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7AI score0.00851EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/11 2:15 a.m.•27 views

CVE-2024-3614

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument namacustomer/alamatcustomer/notelpcustomer leads to cross site scripting. It is possible to initiate...

5.4CVSS3.7AI score0.00589EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/11 12:31 a.m.•14 views

CVE-2024-3614 SourceCodester Warehouse Management System customer.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument namacustomer/alamatcustomer/notelpcustomer leads to cross site scripting. It is possible to initiate...

4CVSS6.2AI score0.00589EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/11 12:31 a.m.•40 views

CVE-2024-3614 SourceCodester Warehouse Management System customer.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument namacustomer/alamatcustomer/notelpcustomer leads to cross site scripting. It is possible to initiate...

4CVSS4.1AI score0.00589EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/11 12:00 a.m.•2 views

CVE-2024-3614: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument namacustomer/alamatcustomer/notelpcustomer leads to cross site scripting. It is possible to initiate...

5.4CVSS4AI score0.00589EPSS
SaveExploits1References2
NVD
NVD
•added 2023/05/24 11:15 a.m.•23 views

CVE-2023-2864

A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid leads to cross site scripting. The...

6.1CVSS4.4AI score0.00549EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/24 11:15 a.m.•24 views

Cross site scripting

A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid leads to cross site scripting. The...

4CVSS6AI score0.00549EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/05/24 10:31 a.m.•66 views

CVE-2023-2864

SourceCodester Online Jewelry Store 1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the POST Parameter Handler, specifically in customer.php where manipulating the Custid argument can trigger XSS. The issue can be exploited remotely and has been publicly disclosed. The public det...

6.1CVSS4.8AI score0.00549EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/24 12:00 a.m.•4 views

CVE-2023-2864: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid leads to cross site scripting. The...

6.1CVSS3.8AI score0.00549EPSS
SaveExploits1References2
Rows per page
Query Builder