Lucene search
+L

33612 matches found

Cvelist
Cvelist
added 2025/12/14 3:32 a.m.37 views

CVE-2025-14644 itsourcecode Student Management System update_subject.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

7.5CVSS0.00379EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/14 3:32 a.m.22 views

CVE-2025-14644

CVE-2025-14644 affects itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the /update_subject.php file triggered by manipulating the ID parameter, exploitable remotely. Public exploits exist per sources, and multiple feeds (NVD, Red Hat, EUVD, CNNVD, CVE records)...

9.8CVSS6.7AI score0.00379EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/12/14 2:15 a.m.13 views

CVE-2025-14639

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

9.8CVSS0.00379EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/14 2:15 a.m.13 views

CVE-2025-14639

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/14 1:32 a.m.33 views

CVE-2025-14640

Affects Code-Projects Student File Management System 1.0. The vulnerability is an SQL injection in the /admin/save_student.php handler, triggered by manipulating the stud_no (or student_no) parameter due to lack of input validation. This can be exploited remotely (attack vector NETWORK) and may a...

9.8CVSS7.2AI score0.00406EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2025/12/14 1:02 a.m.23 views

CVE-2025-14639

CVE-2025-14639 affects itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the file /uprec.php caused by manipulating the ID parameter, with network-based remote exploitation reportedly possible and the exploit publicly available. Multiple connected sources corrob...

9.8CVSS7.3AI score0.00379EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/14 1:02 a.m.38 views

CVE-2025-14639 itsourcecode Student Management System uprec.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

7.5CVSS0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 1:02 a.m.4 views

CVE-2025-14639 itsourcecode Student Management System uprec.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

7.5CVSS6.8AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.8 views

Code-Projects Student File Management System SQL注入漏洞

Student File Management System is a student file management system. A SQL injection vulnerability exists in Student File Management System, which originates from an incorrect manipulation of the parameter userid in the file /admin/deleteuser.php, and can be exploited by an attacker to obtain or...

9.8CVSS7.7AI score0.00406EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.10 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from incorrect manipulation of the parameter ID in the file /updatesubject.php, which...

9.8CVSS7.7AI score0.00379EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.15 views

PT-2025-51163

A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

7.5CVSS7.2AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.12 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from incorrect manipulation of the parameter ID in the file /uprec.php, which could lead...

9.8CVSS7.7AI score0.00379EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.9 views

Code-Projects Student File Management System 代码注入漏洞

Student File Management System is a student file management system. A cross-site scripting vulnerability exists in Student File Management System, which originates from an incorrect operation of the file /admin/updateuser.php, for which no detailed vulnerability details are currently available...

5.4CVSS3.9AI score0.00225EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.12 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter sy in the file /advisers.php, which coul...

9.8CVSS7.7AI score0.00379EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.14 views

PT-2025-51137

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. The issue is located in the file /uprec.php. Manipulation of the ID argument can lead to SQL injection...

9.8CVSS7.5AI score0.00379EPSS
SaveExploits1References11
NVD
NVD
added 2025/12/13 8:15 p.m.10 views

CVE-2025-14637

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to...

9.8CVSS0.00379EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/13 8:02 p.m.11 views

CVE-2025-14578

A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /updateaccount.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/13 6:54 p.m.22 views

CVE-2025-14570

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

9.8CVSS7.3AI score0.00433EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/13 6:54 p.m.15 views

CVE-2025-14571

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.3AI score0.00433EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.11 views

EUVD-2025-203259

A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /updateprogram.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS7.2AI score0.00379EPSS
SaveExploits1References6
Rows per page
Query Builder