Lucene search
K

2155 matches found

OSV
OSV
added 2025/12/14 2:15 p.m.1 views

CVE-2025-14661

A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

9.8CVSS5.8AI score0.00333EPSS
Exploits1References5
CVE
CVE
added 2025/12/14 1:2 p.m.13 views

CVE-2025-14661

CVE-2025-14661 affects itsourcecode Student Management System 1.0. The issue is an SQL injection in /advisers.php caused by improper handling of the sy parameter. It is exploitable remotely with no user interaction; impact could affect confidentiality, integrity, and availability as per the sourc...

9.8CVSS6.8AI score0.00333EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/14 1:2 p.m.1 views

CVE-2025-14661 itsourcecode Student Managemen System advisers.php sql injection

A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

7.5CVSS6.8AI score0.00333EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/14 1:2 p.m.18 views

CVE-2025-14661 itsourcecode Student Managemen System advisers.php sql injection

A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

7.5CVSS0.00333EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/14 12:32 p.m.3 views

EUVD-2025-203293

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

7.5CVSS6.4AI score0.00333EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/14 9:32 a.m.19 views

CVE-2025-14653 itsourcecode Student Management System addrecord.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

7.5CVSS0.00333EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 9:32 a.m.2 views

CVE-2025-14653 itsourcecode Student Management System addrecord.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

7.5CVSS6.6AI score0.00333EPSS
Exploits1References5
CVE
CVE
added 2025/12/14 9:32 a.m.11 views

CVE-2025-14653

CVE-2025-14653 affects itsourcecode Student Management System 1.0. The vulnerability is in an unknown function of /addrecord.php where manipulation of the ID parameter enables SQL injection. Remote exploitation is possible and exploits have been publicly disclosed. Documents consistently describe...

9.8CVSS6.6AI score0.00333EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/12/14 9:30 a.m.4 views

EUVD-2025-203287

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.6AI score0.00333EPSS
Exploits1References6
EUVD
EUVD
added 2025/12/14 9:30 a.m.3 views

EUVD-2025-203292

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS6.6AI score0.00333EPSS
Exploits1References7
CVE
CVE
added 2025/12/14 9:2 a.m.10 views

CVE-2025-14652

CVE-2025-14652 affects itsourcecode Online Cake Ordering System 1.0. A SQL injection vulnerability exists in the /admindetail.php?action=edit endpoint via manipulation of the ID parameter. Exploitation is remote and the exploit has been publicly disclosed. Impact per sources includes confidential...

9.8CVSS6.8AI score0.00333EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/14 9:2 a.m.2 views

CVE-2025-14652 itsourcecode Online Cake Ordering System admindetail.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS6.8AI score0.00333EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/14 9:2 a.m.23 views

CVE-2025-14652 itsourcecode Online Cake Ordering System admindetail.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS0.00333EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 7:32 a.m.3 views

CVE-2025-14649 itsourcecode Online Cake Ordering System supplier.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.8AI score0.00333EPSS
Exploits1References5
CVE
CVE
added 2025/12/14 7:32 a.m.10 views

CVE-2025-14649

CVE-2025-14649 affects itsourcecode Online Cake Ordering System 1.0. The vulnerability is in /cakeshop/supplier.php where manipulating the supplier parameter triggers an SQL injection. Exploitation can be performed remotely and the exploit is publicly available. No remediation/fix details are pro...

9.8CVSS7.4AI score0.00333EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/12/14 4:15 a.m.1 views

CVE-2025-14644

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

9.8CVSS5.8AI score
Exploits0References5
CVE
CVE
added 2025/12/14 3:32 a.m.10 views

CVE-2025-14644

CVE-2025-14644 affects itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the /update_subject.php file triggered by manipulating the ID parameter, exploitable remotely. Public exploits exist per sources, and multiple feeds (NVD, Red Hat, EUVD, CNNVD, CVE records)...

9.8CVSS6.7AI score0.00333EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/14 3:32 a.m.2 views

CVE-2025-14644 itsourcecode Student Management System update_subject.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

7.5CVSS6.7AI score0.00333EPSS
Exploits1References5
NVD
NVD
added 2025/12/14 2:15 a.m.4 views

CVE-2025-14639

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

9.8CVSS0.00333EPSS
Exploits1References5
CVE
CVE
added 2025/12/14 1:2 a.m.11 views

CVE-2025-14639

CVE-2025-14639 affects itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the file /uprec.php caused by manipulating the ID parameter, with network-based remote exploitation reportedly possible and the exploit publicly available. Multiple connected sources corrob...

9.8CVSS7.3AI score0.00333EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder