Lucene search
+L

2993 matches found

NVD
NVD
•added 2025/09/06 1:15 p.m.•19 views

CVE-2025-10033

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

9.8CVSS0.00451EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/09/06 1:15 p.m.•17 views

CVE-2025-10033

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

9.8CVSS7AI score0.00451EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/06 1:02 p.m.•37 views

CVE-2025-10033

CVE-2025-10033 affects itsourcecode Online Discussion Forum 1.0. The vulnerability is a SQL injection in the /admin file caused by manipulation of the Username parameter, exploitable remotely, with public disclosure. Multiple sources confirm the issue and provide varying CVSS perspectives; the NV...

9.8CVSS7AI score0.00451EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/09/06 1:02 p.m.•35 views

CVE-2025-10033 itsourcecode Online Discussion Forum admin sql injection

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

7.5CVSS0.00451EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/06 1:02 p.m.•12 views

CVE-2025-10033 itsourcecode Online Discussion Forum admin sql injection

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

7.5CVSS7AI score0.00451EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/06 8:32 a.m.•36 views

CVE-2025-10029 itsourcecode POS Point of Sale System complex_header_2.php cross site scripting

A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The...

5.1CVSS0.00294EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/06 8:32 a.m.•8 views

CVE-2025-10029 itsourcecode POS Point of Sale System complex_header_2.php cross site scripting

A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The...

5.1CVSS3.5AI score0.00294EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/06 6:32 a.m.•8 views

CVE-2025-10028 itsourcecode POS Point of Sale System 6776.php cross site scripting

A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /inventory/main/vendors/datatables/unittesting/templates/6776.php. Such manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. Th...

5.1CVSS3.5AI score0.00294EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/06 12:00 a.m.•40 views

Itsourcecode POS Point of Sale System Code Injection Vulnerability

POS Point of Sale System is a pos point of sale system. POS Point of Sale System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of the...

6.1CVSS5.6AI score0.00294EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•6 views

CVE-2025-10063: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/deferredtable.php. The manipulation of the argument scripts leads to cross site scripting. Remote exploitation ...

6.1CVSS3.6AI score0.00395EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•8 views

CVE-2025-10029: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The...

6.1CVSS3.5AI score0.00294EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•6 views

CVE-2025-10028: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /inventory/main/vendors/datatables/unittesting/templates/6776.php. Such manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. Th...

6.1CVSS3.5AI score0.00294EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/06 12:00 a.m.•22 views

PT-2025-36402

Name of the Vulnerable Software and Affected Versions: itsourcecode POS Point of Sale System version 1.0 Description: A vulnerability exists in itsourcecode POS Point of Sale System that allows for cross site scripting. The vulnerability affects unknown code within the file...

6.1CVSS3.8AI score0.00395EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/09/06 12:00 a.m.•26 views

Itsourcecode Student Information Management System SQL Injection Vulnerability

itsourcecode Student Information Management System is itsourcecode open source student information management system. SQL injection vulnerability exists in itsourcecode Student Information Management System version 1.0, the vulnerability stems from incorrect manipulation of the parameter uname in...

9.8CVSS7.2AI score0.00432EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/06 12:00 a.m.•19 views

PT-2025-36372

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Discussion Forum version 1.0 Description: A SQL injection issue exists in itsourcecode Online Discussion Forum 1.0. The issue affects an unknown function within the /admin file. Manipulation of the Username parameter can...

9.8CVSS7.1AI score0.00451EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•4 views

CVE-2025-10033: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

9.8CVSS7AI score0.00451EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/06 12:00 a.m.•17 views

itsourcecode Online Discussion Forum SQL Injection Vulnerability

itsourcecode Online Discussion Forum is an online forum for itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which is caused by an incorrect manipulation of the parameter Username resulting in a SQL injection attack...

9.8CVSS7.2AI score0.00451EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/09/05 9:32 p.m.•45 views

CVE-2025-10027 itsourcecode POS Point of Sale System 2512.php cross site scripting

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be...

5.1CVSS0.00296EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/05 8:02 p.m.•29 views

CVE-2025-10026 itsourcecode POS Point of Sale System -complex_header.php cross site scripting

A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/-complexheader.php. The manipulation of the argument scripts results in cross site scripting. It ...

5.1CVSS0.00294EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/05 8:02 p.m.•20 views

CVE-2025-10026 itsourcecode POS Point of Sale System -complex_header.php cross site scripting

A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/-complexheader.php. The manipulation of the argument scripts results in cross site scripting. It ...

5.1CVSS3.7AI score0.00294EPSS
SaveExploits1References5
Rows per page
Query Builder