Lucene search
+L

33617 matches found

RedhatCVE
RedhatCVE
added 2025/11/16 3:50 p.m.18 views

CVE-2025-13200

A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible to be carried out remotely. The exploit has been publicly...

6.9CVSS6.6AI score0.00449EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/11/16 11:02 a.m.7 views

CVE-2025-13248 SourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injection

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

7.5CVSS7.2AI score0.00383EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/16 10:32 a.m.52 views

CVE-2025-13247

CVE-2025-13247 affects PHPGurukul Tourism Management System 1.0. The vulnerability is an SQL injection in an unknown function of the file /admin/user-bookings.php, caused by manipulation of the uid argument. It can be exploited remotely, and an exploit has been publicly released. Remediation guid...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/11/16 6:31 a.m.15 views

EUVD-2025-197715

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/16 6:31 a.m.17 views

EUVD-2025-197714

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS6.6AI score0.00323EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/16 5:16 a.m.12 views

CVE-2025-13237

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

9.8CVSS0.00383EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/16 5:16 a.m.8 views

CVE-2025-13237

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

9.8CVSS5.8AI score0.00383EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 5:02 a.m.5 views

CVE-2025-13237 itsourcecode Inventory Management System LogSignModal.PHP sql injection

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

7.5CVSS7.3AI score0.00383EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/16 5:02 a.m.24 views

CVE-2025-13237 itsourcecode Inventory Management System LogSignModal.PHP sql injection

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

7.5CVSS0.00383EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/16 5:02 a.m.22 views

CVE-2025-13237

Summary: CVE-2025-13237 affects itsourcecode Inventory Management System 1.0. Affected component is the /LogSignModal.PHP file, where improper handling of the U_USERNAME parameter enables a SQL injection. The vulnerability can be exploited remotely and, according to connected sources, the exploit...

9.8CVSS7.3AI score0.00383EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/11/16 4:15 a.m.12 views

CVE-2025-13236

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

9.8CVSS0.00323EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/16 4:15 a.m.13 views

CVE-2025-13236

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/16 4:15 a.m.12 views

CVE-2025-13235

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/16 4:15 a.m.20 views

CVE-2025-13235

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

9.8CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/16 3:32 a.m.20 views

CVE-2025-13235 itsourcecode Inventory Management System login.php sql injection

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 3:32 a.m.3 views

CVE-2025-13235 itsourcecode Inventory Management System login.php sql injection

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

7.5CVSS7.3AI score0.00387EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/16 3:30 a.m.14 views

EUVD-2025-197713

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

7.5CVSS6.4AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/16 3:30 a.m.12 views

EUVD-2025-197712

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS6.5AI score0.00323EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/16 3:15 a.m.9 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/16 3:15 a.m.12 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS0.00323EPSS
SaveExploits1References5
Rows per page
Query Builder