Lucene search
K

2155 matches found

CNNVD
CNNVD
added 2025/11/03 12:0 a.m.3 views

itsourcecode Online Loan Management System SQL注入漏洞

itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file /manageuser.php,...

9.8CVSS7.7AI score0.00359EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.2 views

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH Billing System project contains an administrator side. This PH Billing System project includes an administrator side where the...

9.8CVSS7.1AI score0.0038EPSS
Exploits1References5
CVE
CVE
added 2025/11/02 11:32 p.m.10 views

CVE-2025-12606

Consolidated reports from Red Hat, CIRCL, CNNVD and others confirm a SQL injection in itsourcecode Online Loan Management System 1.0, caused by manipulation of the ID parameter in /manage_borrower.php. Remote exploitation is possible and has been publicly disclosed. The connected documents do not...

9.8CVSS6.7AI score0.00335EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/02 11:32 p.m.4 views

CVE-2025-12606 itsourcecode Online Loan Management System manage_borrower.php sql injection

A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manageborrower.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.7AI score0.00335EPSS
Exploits1References5
NVD
NVD
added 2025/11/02 11:15 p.m.3 views

CVE-2025-12605

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

9.8CVSS0.00335EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/02 11:2 p.m.10 views

CVE-2025-12605 itsourcecode Online Loan Management System manage_loan.php sql injection

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS0.00335EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/02 11:2 p.m.3 views

CVE-2025-12605 itsourcecode Online Loan Management System manage_loan.php sql injection

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manageloan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS7AI score0.00335EPSS
Exploits1References5
CVE
CVE
added 2025/11/02 9:32 p.m.12 views

CVE-2025-12604

The CVE-2025-12604 entry concerns itsourcecode Online Loan Management System 1.0. Affected component: /load_fields.php. Root cause: manipulation of the loan_id parameter enables SQL injection. The issue is exploitable remotely and public disclosure exists. Several connected sources corroborate th...

9.8CVSS7.2AI score0.00335EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/02 12:0 a.m.5 views

PT-2025-44738

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in itsourcecode Online Loan Management System that allows for SQL injection. This issue affects an unspecified part of the /load fields.php file. The loan id...

9.8CVSS6.8AI score0.00335EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/11/02 12:0 a.m.4 views

PT-2025-44740

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in the processing of the /manage borrower.php file within itsourcecode Online Loan Management System. Manipulation of the ID argument can lead to a SQL injection...

9.8CVSS6.7AI score0.00335EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/11/02 12:0 a.m.4 views

itsourcecode Online Loan Management System SQL注入漏洞

itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file /manageloan.php,...

9.8CVSS7.7AI score0.00335EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/10/15 5:44 p.m.3 views

CVE-2025-11736

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

9.8CVSS6.8AI score0.00437EPSS
Exploits1References1
CVE
CVE
added 2025/10/14 5:32 p.m.11 views

CVE-2025-11736

CVE-2025-11736 affects itsourcecode Online Examination System 1.0. Affected component: file /index.php, where manipulation of the Username parameter enables SQL injection. Root cause: improper handling of input leading to database query manipulation. Impact: remote exploitation with high likeliho...

9.8CVSS7.2AI score0.00437EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/14 5:32 p.m.10 views

CVE-2025-11736 itsourcecode Online Examination System index.php sql injection

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

7.5CVSS0.00437EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/14 5:32 p.m.10 views

CVE-2025-11736 itsourcecode Online Examination System index.php sql injection

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may...

7.5CVSS6.6AI score0.00437EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.3 views

PT-2025-42160

Name of the Vulnerable Software and Affected Versions itsourcecode Online Examination System version 1.0 Description A flaw exists in itsourcecode Online Examination System 1.0, related to an unknown functionality within the /index.php file. Manipulating the Username argument can lead to a SQL...

7.5CVSS7.2AI score0.00437EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.3 views

itsourcecode Online Examination System SQL注入漏洞

itsourcecode Online Examination System is a itsourcecode open source online examination system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Examination System, which stems from an incorrect manipulation of the parameter Username in the file /index.php, which could...

9.8CVSS7.7AI score0.00437EPSS
Exploits1References6
CVE
CVE
added 2025/10/08 5:2 a.m.9 views

CVE-2025-11434

Summary: CVE-2025-11434 affects itsourcecode’s Student Transcript Processing System v1.0, with a SQL injection flaw in the /login.php file via the uname parameter. The issue can be exploited remotely and publicly available exploit code exists. Several sources corroborate the impact and exposure, ...

9.8CVSS7.2AI score0.00382EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 5:2 a.m.9 views

CVE-2025-11434 itsourcecode Student Transcript Processing System login.php sql injection

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS0.00382EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 5:2 a.m.2 views

CVE-2025-11434 itsourcecode Student Transcript Processing System login.php sql injection

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS7.2AI score0.00382EPSS
Exploits1References5
Rows per page
Query Builder