Lucene search
+L

11688 matches found

CNNVD
CNNVD
added 2025/11/17 12:00 a.m.9 views

Code-Projects Courier Management System SQL注入漏洞

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Consignment in the file /search-edit.php. An attacker can exploit this...

9.8CVSS7.1AI score0.00367EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.9 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter cmbProductUnit in the file /manufacturer/editproduct.php,...

8.8CVSS7AI score0.0031EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.13 views

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from an incorrect manipulation of the parameter ID in the file /admin/user/index.php?view=edit, which...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.11 views

PT-2025-47211

Name of the Vulnerable Software and Affected Versions Courier Management System version 1.0 Description A SQL injection issue exists in the file /search-edit.php due to manipulation of the Consignment argument. This manipulation can be initiated remotely. The exploit has been publicly disclosed...

6.5CVSS7.2AI score0.00367EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.14 views

PT-2025-47108

A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to...

6.5CVSS7AI score0.0031EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.12 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /manufacturer/editunit.php, which could lead ...

8.8CVSS6.9AI score0.0031EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.22 views

PT-2025-47104

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A security issue has been identified in itsourcecode Inventory Management System version 1.0. The issue involves a SQL injection vulnerability present in an unknown function with...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References12
OSV
OSV
added 2025/11/16 9:15 a.m.10 views

CVE-2025-13245

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.4CVSS4.2AI score0.00257EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/16 9:02 a.m.17 views

EUVD-2025-197723

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.1CVSS3.6AI score0.00257EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/11/16 9:02 a.m.25 views

CVE-2025-13245 code-projects Student Information System editprofile.php cross site scripting

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.1CVSS0.00257EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/16 8:02 a.m.22 views

CVE-2025-13243

CVE-2025-13243 affects code-projects Student Information System 2.0. The vulnerable component is the /editprofile.php file, in an unknown function, where input is not properly filtered, leading to a SQL injection. The vulnerability is exploitable remotely, and the exploit has been publicly releas...

8.8CVSS6.5AI score0.00351EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/11/16 6:31 a.m.13 views

EUVD-2025-197717

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

6.5CVSS6.1AI score0.00317EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/16 6:31 a.m.17 views

EUVD-2025-197714

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS6.6AI score0.00323EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/16 6:15 a.m.9 views

CVE-2025-13238

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

8.8CVSS5.4AI score0.00317EPSS
SaveExploits1References4
NVD
NVD
added 2025/11/16 6:15 a.m.12 views

CVE-2025-13238

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

8.8CVSS0.00317EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/11/16 5:32 a.m.5 views

CVE-2025-13238 Bdtask Flight Booking Software Edit Profile edit unrestricted upload

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

6.5CVSS6.2AI score0.00317EPSS
SaveExploits1References4
CVE
CVE
added 2025/11/16 5:32 a.m.28 views

CVE-2025-13238

CVE-2025-13238 affects Bdtask Flight Booking Software 4. The Edit Profile Page component (/agent/profile/edit) is susceptible to manipulation that enables unrestricted file uploads. The flaw can be exploited remotely and has publicly available exploit materials. Multiple sources corroborate the i...

8.8CVSS6.2AI score0.00317EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/11/16 5:32 a.m.25 views

CVE-2025-13238 Bdtask Flight Booking Software Edit Profile edit unrestricted upload

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has be...

6.5CVSS0.00317EPSS
SaveExploits1References4
NVD
NVD
added 2025/11/16 4:15 a.m.12 views

CVE-2025-13236

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

9.8CVSS0.00323EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/16 4:15 a.m.13 views

CVE-2025-13236

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
Rows per page
Query Builder