Lucene search
+L

321 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:58 a.m.6 views

CVE-2023-1113

A vulnerability was found in SourceCodester Simple Payroll System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=admin of the component POST Parameter Handler. The manipulation of the argument fullname leads to cross si...

4.8CVSS5.9AI score0.00589EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:58 a.m.7 views

CVE-2023-1100

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/addmessage.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is...

9.8CVSS8.1AI score0.00765EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/22 12:0 a.m.5 views

Daily Expense Tracker System SQL Injection Vulnerability (CNVD-2025-31002)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter fullname/contactnumber in the file...

9.8CVSS8.3AI score0.00621EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/20 12:0 a.m.3 views

Company Visitor Management System /visitors-form.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /visitors-form.php. An attacker c...

9.8CVSS8.2AI score0.00438EPSS
Exploits1References1
OSV
OSV
added 2025/05/16 3:15 p.m.7 views

CVE-2025-4785

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user-profile.php. The manipulation of the argument fullname/contactnumber leads to sql injection. The attack may be launched...

9.8CVSS5.8AI score0.00621EPSS
Exploits1References6
OSV
OSV
added 2025/05/15 8:16 p.m.4 views

CVE-2025-4717

A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /visitors-form.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.7AI score0.00438EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.5 views

PHPGurukul Company Visitor Management System 注入漏洞

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /visitors-form.php. An attacker c...

9.8CVSS7.9AI score0.00438EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.6 views

SourceCodester Online Student Clearance System 代码注入漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from cross-site scripting due to the operation of parameter Fullna...

5.4CVSS4.3AI score0.005EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.7 views

SourceCodester Online Student Clearance System 注入漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. SourceCodester Online Student Clearance System version 1.0 has an injection vulnerability, the vulnerability stems from the parameter txtfullname/txtemail/cmddesignation operation in t...

9.8CVSS7.8AI score0.00841EPSS
Exploits1References6
NVD
NVD
added 2025/05/05 2:15 p.m.44 views

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

6.1CVSS0.00241EPSS
Exploits1References2
OSV
OSV
added 2025/05/05 2:15 p.m.5 views

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

6.1CVSS5.8AI score0.00241EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/05/05 12:0 a.m.35 views

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

0.00241EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.5 views

SourceCodester Web Based Pharmacy Product Management System 安全漏洞

SourceCodester Web Based Pharmacy Product Management System is an open source web-based pharmaceutical management system from SourceCodester. A security vulnerability exists in SourceCodester Web Based Pharmacy Product Management System version 1.0, which originates from an unvalidated Fullname...

6.1CVSS6.1AI score0.00241EPSS
Exploits1References2
CVE
CVE
added 2025/05/05 12:0 a.m.57 views

CVE-2025-45751

CVE-2025-45751 affects SourceCodester Web Based Pharmacy Product Management System 1.0. The issue is a Cross Site Scripting (XSS) vulnerability in add-admin.php via the Fullname field, with root cause an unvalidated Fullname input. Potential impact is client-side script execution in the context o...

6.1CVSS5.8AI score0.00241EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2025/04/09 12:0 a.m.6 views

Restaurant Table Booking System edit-subadmin.php file SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the parameter fullname of the edit-subadmin.php file. An attacke...

7.2CVSS8.1AI score0.00425EPSS
Exploits1References1
CNVD
CNVD
added 2025/04/09 12:0 a.m.3 views

Restaurant Table Booking System add-subadmin.php File SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the parameter fullname of the add-subadmin.php file. An attacker...

8.8CVSS8.1AI score0.00418EPSS
Exploits1References1
OSV
OSV
added 2025/04/06 1:15 a.m.6 views

CVE-2025-3306

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /don.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00507EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/06 12:0 a.m.5 views

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname that can lead to SQL injection...

9.8CVSS7.9AI score0.00507EPSS
Exploits1References6
OSV
OSV
added 2025/04/04 9:15 a.m.5 views

CVE-2025-3229

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploi...

7.2CVSS5.8AI score0.00425EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/04 12:0 a.m.6 views

PHPGurukul Restaurant Table Booking System 注入漏洞

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the parameter fullname of the edit-subadmin.php file. An attacke...

7.2CVSS5.6AI score0.00425EPSS
Exploits1References5
Rows per page
Query Builder