Lucene search
K

2155 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:42 a.m.15 views

CVE-2024-37871

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter...

8.2CVSS9AI score0.00454EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:17 a.m.6 views

CVE-2024-8220

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file staffedit.php. The manipulation of the argument id/stafftype/address/fullname/phonenumber/salary leads to sql...

9.8CVSS9.7AI score0.0059EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:58 a.m.5 views

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.1CVSS8.9AI score0.00543EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:48 a.m.5 views

CVE-2024-52676

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...

5.4CVSS5.3AI score0.00256EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:39 a.m.5 views

CVE-2024-11589

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /expcatedit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

8.8CVSS7.5AI score0.00672EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:32 a.m.8 views

CVE-2024-50971

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...

7.2CVSS8.8AI score0.00732EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:23 a.m.8 views

CVE-2024-6958

A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /stupdate.php of the component Avatar File Handler. The manipulation of the argument personalimage leads to unrestricted upload. The attack can be...

8.8CVSS7.2AI score0.00634EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:21 a.m.6 views

CVE-2024-10738

A vulnerability classified as critical was found in itsourcecode Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file manage-breed.php. The manipulation of the argument breed leads to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS7.4AI score0.00508EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/20 11:18 p.m.6 views

CVE-2025-4864

A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/finished.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS7.5AI score0.00445EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/20 11:18 p.m.6 views

CVE-2025-4886

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS7.4AI score0.00415EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/20 11:18 p.m.7 views

CVE-2025-4881

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/usersave.php. The manipulation of the argument username/name leads to sql injection. The attack may be launched remotely...

9.8CVSS7.3AI score0.00445EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/20 11:18 p.m.10 views

CVE-2025-4885

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS7.4AI score0.00415EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/20 11:18 p.m.9 views

CVE-2025-4865

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/membersave.php. The manipulation of the argument last leads to sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS7.4AI score0.00445EPSS
Exploits1
NVD
NVD
added 2025/05/18 4:15 p.m.16 views

CVE-2025-4886

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS0.00415EPSS
Exploits1References5
NVD
NVD
added 2025/05/18 4:15 p.m.22 views

CVE-2025-4885

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS0.00415EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/18 4:0 p.m.5 views

CVE-2025-4886 itsourcecode Sales and Inventory System product_update.php sql injection

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. Th...

7.5CVSS7.6AI score0.00415EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/18 4:0 p.m.15 views

CVE-2025-4886 itsourcecode Sales and Inventory System product_update.php sql injection

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. Th...

7.5CVSS0.00415EPSS
Exploits1References5
CVE
CVE
added 2025/05/18 4:0 p.m.40 views

CVE-2025-4886

CVE-2025-4886 affects itsourcecode Sales and Inventory System 1.0. The vulnerability is a SQL injection in the file /pages/product_update.php caused by manipulation of the serial parameter. It can be exploited remotely and the exploit has been disclosed publicly; other parameters may be affected ...

9.8CVSS7.7AI score0.00415EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/18 3:31 p.m.21 views

CVE-2025-4885 itsourcecode Sales and Inventory System product_add.php sql injection

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

7.5CVSS0.00415EPSS
Exploits1References5
CVE
CVE
added 2025/05/18 3:31 p.m.38 views

CVE-2025-4885

CVE-2025-4885 affects the iSourcecode Sales and Inventory System 1.0. The vulnerability targets an unknown function in the file /pages/product_add.php, where manipulation of the serial parameter leads to an SQL injection. It is exploitable remotely, and the exploit has been disclosed publicly. Mu...

9.8CVSS7.7AI score0.00415EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder