Lucene search
+L

340 matches found

RedhatCVE
RedhatCVE
added 2026/01/06 3:9 p.m.10 views

CVE-2026-0597

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

6.5CVSS6.6AI score0.00277EPSS
Exploits1References1
OSV
OSV
added 2026/01/05 3:15 p.m.8 views

CVE-2026-0597

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

9.8CVSS5.7AI score0.00277EPSS
Exploits1References5
NVD
NVD
added 2026/01/05 3:15 p.m.12 views

CVE-2026-0597

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

9.8CVSS0.00277EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/05 2:32 p.m.33 views

CVE-2026-0597 Campcodes Supplier Management System edit_profile.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

6.5CVSS0.00277EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/05 2:32 p.m.4 views

CVE-2026-0597 Campcodes Supplier Management System edit_profile.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

6.5CVSS6.4AI score0.00277EPSS
Exploits1References5
CVE
CVE
added 2026/01/05 2:32 p.m.23 views

CVE-2026-0597

CVE-2026-0597 affects Campcodes Supplier Management System v1.0. The vulnerability is in the file /retailer/edit_profile.php where manipulation of the txtRetailerAddress parameter causes an SQL injection. Remote exploitation is possible and the exploit has been published. Public sources assign hi...

9.8CVSS6.3AI score0.00277EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2026/01/05 2:32 p.m.7 views

EUVD-2026-0852

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

6.5CVSS6.2AI score0.00277EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.17 views

PT-2026-1291

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A flaw exists in Campcodes Supplier Management System version 1.0, specifically within the file /retailer/edit profile.php. The manipulation of the txtRetailerAddress argument can le...

6.5CVSS6.7AI score0.00277EPSS
Exploits1References8
OSV
OSV
added 2026/01/02 10:15 a.m.8 views

CVE-2026-0547

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...

8.8CVSS5.4AI score0.0031EPSS
Exploits1References5
NVD
NVD
added 2026/01/02 10:15 a.m.7 views

CVE-2026-0547

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...

8.8CVSS0.0031EPSS
Exploits1References5
CNVD
CNVD
added 2025/11/18 12:0 a.m.7 views

Student Information System editprofile.php File Cross-Site Scripting Vulnerability

Student Information System is a student information system. A cross-site scripting vulnerability exists in the Student Information System, which originates from an unspecified function in the /editprofile.php file that improperly handles user input. An attacker can exploit this vulnerability by...

5.4CVSS4.3AI score0.00253EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 1:14 p.m.6 views

CVE-2025-13180

A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Impacted is an unknown function of the file /editprofile. Performing manipulation of the argument firstname/lastname results in basic cross site scripting. It is possible to...

5.4CVSS3.8AI score0.00229EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 1:14 p.m.5 views

CVE-2025-13178

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /editprofile of the component User Profile Handler. This manipulation of the argument firstname/lastname causes basic cross site scripting. The attack is possible to be carried...

5.4CVSS3.8AI score0.00229EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 7:3 a.m.10 views

CVE-2025-13238

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

8.8CVSS6.2AI score0.00312EPSS
Exploits1References1
OSV
OSV
added 2025/11/16 9:15 a.m.6 views

CVE-2025-13245

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.4CVSS4.2AI score0.00253EPSS
Exploits1References5
EUVD
EUVD
added 2025/11/16 9:2 a.m.6 views

EUVD-2025-197723

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.1CVSS3.6AI score0.00253EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/11/16 9:2 a.m.14 views

CVE-2025-13245 code-projects Student Information System editprofile.php cross site scripting

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.1CVSS0.00253EPSS
Exploits1References5
CVE
CVE
added 2025/11/16 8:2 a.m.16 views

CVE-2025-13243

CVE-2025-13243 affects code-projects Student Information System 2.0. The vulnerable component is the /editprofile.php file, in an unknown function, where input is not properly filtered, leading to a SQL injection. The vulnerability is exploitable remotely, and the exploit has been publicly releas...

8.8CVSS6.5AI score0.00343EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/11/16 6:31 a.m.7 views

EUVD-2025-197717

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

6.5CVSS6.1AI score0.00312EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/16 5:32 a.m.16 views

CVE-2025-13238 Bdtask Flight Booking Software Edit Profile edit unrestricted upload

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

6.5CVSS0.00312EPSS
Exploits1References4
Rows per page
Query Builder