Lucene search
+L

73 matches found

OSV
OSV
•added 2025/10/08 3:15 a.m.•16 views

CVE-2025-11425

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /editadmin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly...

4.8CVSS4.2AI score0.00261EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/08 3:15 a.m.•24 views

CVE-2025-11425

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /editadmin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly...

4.8CVSS0.00261EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/08 2:32 a.m.•37 views

CVE-2025-11425

CVE-2025-11425 affects projectworlds Advanced Library Management System 1.0, with an XSS vulnerability in the /edit_admin.php handling of the firstname parameter. The issue is exploitable remotely and has publicly available exploits. Other parameters may be affected as well. Authored/verified rep...

4.8CVSS4AI score0.00261EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/10/08 2:32 a.m.•34 views

CVE-2025-11425 projectworlds Advanced Library Management System edit_admin.php cross site scripting

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /editadmin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly...

4.8CVSS0.00261EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/08 2:32 a.m.•11 views

CVE-2025-11425 projectworlds Advanced Library Management System edit_admin.php cross site scripting

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /editadmin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly...

4.8CVSS4AI score0.00261EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•28 views

PT-2025-41217

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System version 1.0, specifically within the file /edit admin.php. Manipulation of the firstname argument can le...

4.8CVSS3.3AI score0.00261EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•15 views

Code-Projects Library Management System 安全漏洞

Code-Projects Library Management System is an open source library management system from Code-Projects. A security vulnerability exists in Code-Projects Library Management System version 1.0, which stems from an incorrect manipulation of the parameter firstname in the file /editadmin.php, which...

4.8CVSS3.8AI score0.00261EPSS
SaveExploits1References4
OSV
OSV
•added 2025/08/03 2:15 a.m.•12 views

CVE-2025-8495

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/editadminquery.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.0051EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/22 9:59 p.m.•18 views

CVE-2022-44389

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information...

6.5CVSS7.4AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•15 views

SourceCodester Online Student Clearance System 注入漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. SourceCodester Online Student Clearance System version 1.0 has an injection vulnerability, the vulnerability stems from the parameter txtfullname/txtemail/cmddesignation operation in t...

9.8CVSS7.8AI score0.0108EPSS
SaveExploits1References6
OSV
OSV
•added 2024/10/28 3:15 p.m.•17 views

CVE-2024-48291

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=editAdmin&id=17...

6.3CVSS5.8AI score0.00188EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/28 12:00 a.m.•16 views

dingfanzu 安全漏洞

dingfanzu is a php-based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version 1.0, which originates from /admin/doAdminAction.php?act=editAdmin&id=17 contains a cross-site request forgery vulnerability...

6.3CVSS6.8AI score0.00188EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/03 12:15 p.m.•23 views

CVE-2024-3255

A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the file admin/editadminquery.php. The manipulation of the argument username/password/name/adminid leads to sql injection. It is possible to...

7.2CVSS5.7AI score0.00758EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/03 12:00 p.m.•97 views

CVE-2024-3255

The CVE-2024-3255 entry concerns SourceCodester Internship Portal Management System version 1.0. Affected is an unknown function in admin/edit_admin_query.php where manipulating parameters username, password, name, or admin_id leads to SQL injection. Exploitation can be performed remotely, and pu...

7.2CVSS6.8AI score0.00758EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/27 12:00 a.m.•32 views

PT-2024-18430 · Sourcecodester · Sourcecodester Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System version 1.0 Description: A critical issue has been found in the Edit User Profile Page of the SourceCodester Web-Based Student Clearance System, specifically in the file /admin/edit-admin.php...

7.2CVSS5.8AI score0.00714EPSS
SaveExploits1References5
OSV
OSV
•added 2023/12/20 7:15 p.m.•17 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS6AI score0.0078EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/20 7:15 p.m.•38 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS0.0078EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/20 7:15 p.m.•10 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS6.1AI score0.0078EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/12/20 12:00 a.m.•18 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.9AI score0.0078EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2023/08/01 12:00 a.m.•299 views

CMSUsina 2.2.3 Cross Site Request Forgery

==================================================================================================================================== | Title : CMSUsina V2.2.3 CSRF Add Admin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | |...

7.1AI score
SaveExploits0
Rows per page
Query Builder