CVE-2025-10081 SourceCodester Pet Management System profile.php unrestricted upload

A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument websiteimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2025-10081

CVE-2025-10081 affects SourceCodester Pet Management System v1.0. The flaw is in /admin/profile.php, where manipulating the website_image argument enables unrestricted file upload, with remote exploitation possible. The vulnerability is corroborated by multiple sources; an exploit has been publis...

The vulnerability of the pub_ret method in the configuration management system and the remote execution of Salt operations allows a perpetrator to cause service failures.

The vulnerability of the pubret method in the configuration management system and the remote execution of Salt operations is related to insufficient validation of input data when processing the jid parameter. Exploiting this vulnerability can allow attackers to circumvent established security...

CVE-2025-40641: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the productname parameter in /ControllerProducts/update. This vulnerability could allow a remote us...

CVE-2025-10109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

The vulnerability of the salt.auth.pki component of the configuration management system and remote Salt execution process allows a perpetrator to bypass the authentication process.

The vulnerability of the salt.auth.pki component of the configuration management system and remote Salt execution processes is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

The vulnerability of the _minionevent method in the configuration management system and remote Salt execution allows a attacker to execute arbitrary commands.

The vulnerability of the minionevent method in the configuration management system and for remote execution of Salt commands is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

PHPGurukul User Management System SQL注入漏洞

PHPGurukul User Management System is a user management system from PHPGurukul Inc. A SQL injection vulnerability exists in PHPGurukul User Management System version 1.0, which is caused by incorrect manipulation of the parameter uid...

CampCodes Online Loan Management System SQL注入漏洞

CampCodes Online Loan Management System is an online loan management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in Campcodes Online Loan Management System version 1.0, which stems from an incorrect manipulation of a parameter ID resulting in SQL injection...

PT-2025-36498

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The application suffers from a Cross-Site Request Forgery CSRF issue. This occurs through the /admin/doAdminAction.php?act=addShop component. Recommendations: Apply appropriate CSRF protection mechanisms...

The vulnerability of the recv_file method in the configuration management system and remote execution of Salt operations allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the recvfile method in the configuration management system and remote execution of Salt operations is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

SourceCodester Petshop Management System 代码问题漏洞

SourceCodester Petshop Management System is SourceCodester open source a pet store management system . A code issue vulnerability exists in SourceCodester Petshop Management System version 1.0, which stems from improper handling of parameters in the /admin/profile.php file, which can lead to...

CVE-2025-10081: Unrestricted Upload of File with Dangerous Type

A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument websiteimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2025-10108: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...

CVE-2025-10111: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/instructor/index.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploi...

CVE-2025-10098: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in sql injection. The attack may be performed from remote. The exploit has been released to the publ...

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

Disclaimer This repository provides a Python 3 compatible exp...

CVE-2025-10062 itsourcecode Student Information Management System login.php sql injection

A vulnerability was determined in itsourcecode Student Information Management System 1.0. This affects an unknown part of the file /admin/login.php. Executing manipulation of the argument uname can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed...

itsourcecode Student Information Management System SQL注入漏洞

itsourcecode Student Information Management System is itsourcecode open source student information management system. SQL injection vulnerability exists in itsourcecode Student Information Management System version 1.0, the vulnerability stems from incorrect manipulation of the parameter uname in...

PT-2025-36401

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A vulnerability exists in itsourcecode Student Information Management System that allows for SQL injection. The issue affects an unknown part of the /admin/login.php...