Lucene search
K

2155 matches found

CNNVD
CNNVD
added 2025/09/01 12:0 a.m.8 views

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /Admin/resultdetails.php. An attacker can exploit this vulnerabili...

9.8CVSS7.8AI score0.00387EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/09/01 12:0 a.m.3 views

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/sporttype.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00483EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/09/01 12:0 a.m.3 views

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in ddlBranch, a parameter of the Setting Handler component in file...

9.8CVSS7.8AI score0.00384EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/09/01 12:0 a.m.3 views

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/facilitator.php. An attacker can exploit this vulnerabili...

9.8CVSS7.9AI score0.0055EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/09/01 12:0 a.m.3 views

PT-2025-35468

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A vulnerability exists in itsourcecode Sports Management System 1.0. The manipulation of the code argument in the file /Admin/mode.php can lead to SQL injection. The attack can be...

9.8CVSS6.5AI score0.00403EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/09/01 12:0 a.m.4 views

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter ID in file /Admin/tournamentdetails.php. An attacker can exploit this vulnerability t...

9.8CVSS7.8AI score0.00387EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/08/31 1:2 p.m.7 views

CVE-2025-9730 itsourcecode Apartment Management System updateProfile.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS0.00383EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/08/31 12:36 p.m.3 views

CVE-2025-9645

A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /tdashboard/rallinfo.php. The manipulation of the argument mid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

9.8CVSS7.4AI score0.00384EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/08/31 12:0 a.m.2 views

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter userid in the file /ajax/updateProfile.php. An attacker can exploit...

9.8CVSS7.8AI score0.00383EPSS
Exploits1References7
OSV
OSV
added 2025/08/30 5:15 a.m.2 views

CVE-2025-9679

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /courseedit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00383EPSS
Exploits1References5
CVE
CVE
added 2025/08/30 4:32 a.m.17 views

CVE-2025-9679

CVE-2025-9679 affects itsourcecode Student Information System 1.0. The SQL injection vulnerability originates from manipulating the ID parameter in /course_edit1.php, enabling remote exploitation. Multiple connected feeds describe a publicly disclosed exploit with potential impact on confidential...

9.8CVSS7.3AI score0.00383EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/30 4:32 a.m.8 views

CVE-2025-9679 itsourcecode Student Information System course_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /courseedit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

7.5CVSS0.00383EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/30 12:0 a.m.3 views

PT-2025-35346

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information System version 1.0 Description: A security issue exists in itsourcecode Student Information System 1.0. The vulnerability is related to SQL injection in the /course edit1.php file. Manipulation of the ID...

9.8CVSS7.2AI score0.00383EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/08/30 12:0 a.m.1 views

itsourcecode Student Information System 安全漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Information System, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.5AI score0.00383EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/08/29 12:32 p.m.3 views

CVE-2025-9644 itsourcecode Apartment Management System bill_setup.php sql injection

A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/billsetup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The...

7.5CVSS7AI score0.00369EPSS
Exploits1References5
OSV
OSV
added 2025/08/29 12:15 p.m.3 views

CVE-2025-9643

A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utilitybillsetup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack...

9.8CVSS5.7AI score0.00384EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/29 12:2 p.m.4 views

CVE-2025-9643 itsourcecode Apartment Management System utility_bill_setup.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utilitybillsetup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack...

7.5CVSS6.9AI score0.00384EPSS
Exploits1References5
CVE
CVE
added 2025/08/29 12:2 p.m.13 views

CVE-2025-9643

CVE-2025-9643 affects itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /setting/utility_bill_setup.php, exploitable by manipulating the txtGasBill parameter. Exploitation can be performed remotely and public exploits exist. Multiple connected sources ...

9.8CVSS6.9AI score0.00384EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/08/29 1:2 a.m.16 views

CVE-2025-9601

The CVE-2025-9601 entry affects itsourcecode Apartment Management System 1.0. A SQL injection vulnerability exists in the file /setting/employee_salary_setup.php, triggered by the ddlEmpName parameter due to improper input handling. This could allow an attacker to remotely exploit and execute arb...

9.8CVSS7.4AI score0.00387EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/08/29 12:32 a.m.13 views

CVE-2025-9600

Summary: CVE-2025-9600 affects itsourcecode Apartment Management System 1.0. The vulnerability resides in /setting/member_type_setup.php, where unsanitized input in the txtMemberType parameter enables SQL injection. Multiple sources (CNVD, CNNVD, Red Hat, NVD, CVE listings) corroborate remote exp...

9.8CVSS7.3AI score0.00387EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder