Lucene search
K

2155 matches found

CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

itsourcecode Student Information System 安全漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Information System, which stems from an incorrect manipulation of the parameter levelid in the file /leveledit1.php, which...

8.8CVSS6.7AI score0.00308EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

itsourcecode E-Logbook with Health Monitoring System for COVID-19 代码注入漏洞

itsourcecode E-Logbook with Health Monitoring System for COVID-19 is an electronic logging system for the New Crown Pneumonia Health Monitoring System for COVID-19 open source by itsourcecode. A code injection vulnerability exists in itsourcecode E-Logbook with Health Monitoring System for COVID-...

6.1CVSS4.9AI score0.00322EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

itsourcecode Online Clinic Management System SQL注入漏洞

itsourcecode Online Clinic Management System is a itsourcecode open source online clinic management system. SQL injection vulnerability exists in itsourcecode Online Clinic Management System version 1.0, which originates from incorrect manipulation of the parameters...

8.8CVSS6.9AI score0.00351EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.3 views

PT-2025-38251

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information System version 1.0 Description: A SQL injection issue exists in itsourcecode Student Information System 1.0 due to manipulation of the level id argument in the /leveledit1.php file. The issue is exploitable...

6.5CVSS6.3AI score0.00308EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.4 views

PT-2025-38275

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0 Description: A security flaw has been discovered that allows for unrestricted upload. The issue affects an unknown function within the /admin/users.php file and can be exploited remotely. The exploi...

6.5CVSS6.2AI score0.00423EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.4 views

PT-2025-38280

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Clinic Management System version 1.0 Description: A flaw has been found in the itsourcecode Online Clinic Management System. The vulnerability affects unknown code within the /editp2.php file. Manipulation of the id,...

6.5CVSS6.5AI score0.00351EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.4 views

PT-2025-38223

Name of the Vulnerable Software and Affected Versions: itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description: A security flaw exists in itsourcecode Web-Based Internet Laboratory Management System. Manipulation of the user email argument in the User::AuthenticateUse...

7.5CVSS7.6AI score0.00444EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

itsourcecode E-Commerce Website 代码问题漏洞

itsourcecode E-Commerce Website is an open source e-commerce website by itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode E-Commerce Website, which originates from an unlimited upload function in file /admin/users.php, which could lead to a remote attack...

8.8CVSS6.7AI score0.00423EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/15 4:32 a.m.2 views

CVE-2025-10426 itsourcecode Online Laundry Management System login.php sql injection

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

7.5CVSS7.3AI score0.00387EPSS
Exploits1References5
CVE
CVE
added 2025/09/15 4:32 a.m.18 views

CVE-2025-10426

The CVE-2025-10426 entry concerns itsourcecode Online Laundry Management System 1.0. A SQL injection vulnerability exists in an unknown function of the file /login.php triggered by manipulating the Username argument. The issue is exploitable remotely and exploitation has been publicly released. R...

9.8CVSS6.7AI score0.00387EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/09/15 12:0 a.m.1 views

itsourcecode Online Laundry Management System SQL注入漏洞

itsourcecode Online Laundry Management System is an online laundry management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Laundry Management System, which stems from an incorrect manipulation of the parameter Username in the fil...

9.8CVSS7.7AI score0.00387EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/15 12:0 a.m.3 views

PT-2025-37449

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Laundry Management System version 1.0 Description: A security flaw has been discovered that allows for SQL injection. Manipulation of the Username argument in an unknown function of the file /login.php can trigger this...

9.8CVSS7.3AI score0.00387EPSS
Exploits1References11
Cvelist
Cvelist
added 2025/09/14 9:32 p.m.10 views

CVE-2025-10411 itsourcecode E-Logbook with Health Monitoring System for COVID-19 POST Request check_profile.php cross site scripting

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

5.3CVSS0.00329EPSS
Exploits1References5
CVE
CVE
added 2025/09/14 9:32 p.m.16 views

CVE-2025-10411

CVE-2025-10411 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is in the POST Request Handler, where manipulation of the profile_id argument in /stc-log-keeper/check_profile.php enables cross-site scripting. Exploitation can be remote, and public e...

6.1CVSS4.2AI score0.00329EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/14 6:32 p.m.8 views

CVE-2025-10405 itsourcecode Baptism Information Management System listbaptism.php sql injection

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument baptid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

7.5CVSS0.00383EPSS
Exploits1References5
CVE
CVE
added 2025/09/14 6:2 p.m.17 views

CVE-2025-10404

CVE-2025-10404 affects the open-source-looking product itsourcecode Baptism Information Management System 1.0 . The vulnerability is in the file /rptbaptismal.php where manipulating the ID parameter leads to a SQL injection . Exploitation is described as remote with a publicly available exploit (...

9.8CVSS7AI score0.00393EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/14 6:2 p.m.1 views

CVE-2025-10404 itsourcecode Baptism Information Management System rptbaptismal.php sql injection

A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be...

7.5CVSS7.1AI score0.00393EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/14 12:0 a.m.2 views

itsourcecode Baptism Information Management System SQL注入漏洞

itsourcecode Baptism Information Management System is itsourcecode open source information management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Baptism Information Management System, which stems from an incorrect manipulation of the parameter baptid in the file...

9.8CVSS7.6AI score0.00383EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/09/10 11:17 p.m.3 views

CVE-2025-10111

A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/instructor/index.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploi...

9.8CVSS7.3AI score0.00387EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/09 2:26 a.m.16 views

CVE-2025-10067

A vulnerability was detected in itsourcecode POS Point of Sale System 1.0. The impacted element is an unknown function of the file /inventory/main/vendors/datatables/unittesting/templates/emptytable.php. Performing manipulation of the argument scripts results in cross site scripting. It is possib...

6.1CVSS4.1AI score0.00364EPSS
Exploits1References1
Rows per page
Query Builder