26641 matches found
CVE-2025-10600 SourceCodester Online Exam Form Submission register.php unrestricted upload
A flaw has been found in SourceCodester Online Exam Form Submission 1.0. This impacts an unknown function of the file /register.php. This manipulation of the argument img causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used...
CVE-2025-10600
CVE-2025-10600 affects SourceCodester Online Exam Form Submission 1.0, specifically the /register.php endpoint where manipulation of the img parameter enables unrestricted file uploads. The connected documents confirm remote exploitation with an exploit published, indicating an attacker could upl...
CVE-2025-10596
A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument usn results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2025-10596 SourceCodester Online Exam Form Submission index.php sql injection
A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument usn results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2025-10596
The CVE-2025-10596 entry pertains to SourceCodester Online Exam Form Submission 1.0, where the usn parameter in /index.php is vulnerable to SQL injection. The issue is exploitable remotely and has been published publicly, indicating potential in-the-wild use. Affected component: /index.php; root ...
CVE-2025-10447
A vulnerability was detected in Campcodes Online Job Finder System 1.0. The impacted element is an unknown function of the file /eris/applicationform.php. The manipulation of the argument picture results in unrestricted upload. It is possible to launch the attack remotely. The exploit is now publ...
XML External Entity Injection (XXE)
org.apache.tika, tika-parser-pdf-module is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of crafted XFA files inside PDFs, which allows an attacker to read sensitive data or trigger malicious requests to internal or third-party servers...
PoC-Stored-XSS-textpattern-4.8.8-Exploit
Textpattern CMS 4.8.8 — Stored XSS Advisory Title: Stored...
CVE-2025-9891
The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the mousersyncformhandler function. This makes it possible for unauthenticated attackers to...
CVE-2025-9629 USS Upyun <= 1.5.0 - Cross-Site Request Forgery
The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on the usssettingpage function when processing the ussset form type. This makes it possible for unauthenticated attacker...
SourceCodester Online Exam Form Submission 代码问题漏洞
SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A code issue vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from incorrect manipulation of the parameter img in the file /register.php, which coul...
SourceCodester Online Exam Form Submission SQL注入漏洞
SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A SQL injection vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which originates from the incorrect manipulation of the parameter email in the file...
PT-2025-38228
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection vulnerability exists due to manipulation of the ID argument in the /admin/delete s1.php file. This vulnerability can be exploited remotely. The exploit has be...
PT-2025-38289
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists in SourceCodester Online Exam Form Submission 1.0. Manipulation of the ID argument in the /admin/delete user.php API endpoint can lead to SQL...
PT-2025-38225
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists due to the manipulation of the email parameter within an unknown function of the /admin/index.php file. This allows for remote exploitation. The...
PT-2025-38102
Name of the Vulnerable Software and Affected Versions: USS Upyun plugin for WordPress versions prior to 1.5.1 Description: The USS Upyun plugin for WordPress is susceptible to a Cross-Site Request Forgery issue. This is due to missing or incorrect nonce validation within the uss setting page...
PT-2025-38224
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A flaw exists in SourceCodester Online Exam Form Submission that allows for unrestricted file upload. The issue is related to the manipulation of the img argument within the...
Security Bulletin: IBM Rational Developer for i is affected by an HTTP Parameter Pollution vulnerability in form-data (CVE-2025-7783)
Summary Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP in the Code Coverage functionality within IBM Rational Developer for i. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in form-data...
