Lucene search
K

368 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:39 p.m.6 views

CVE-2022-28028

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

9.8CVSS8.3AI score0.01364EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:17 p.m.5 views

CVE-2022-1991

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

4.8CVSS6.3AI score0.00572EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/04/19 7:0 p.m.7 views

CVE-2025-3817 SourceCodester Online Eyewear Shop Master.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=deletestock. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

6.5CVSS7.4AI score0.00406EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/19 12:0 a.m.2 views

SourceCodester Online Eyewear Shop 注入漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...

8.8CVSS7AI score0.00406EPSS
Exploits1References5
CVE
CVE
added 2025/04/16 1:31 p.m.71 views

CVE-2025-3692

CVE-2025-3692 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability lies in an unknown functionality exercised by the file /oews/classes/Master.php?f=save_product, enabling cross-site scripting. The attack is possible remotely and the exploit has been disclosed publicly. Connected sou...

5.4CVSS3.5AI score0.00293EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/05 8:31 a.m.5 views

CVE-2025-3297 SourceCodester Online Eyewear Shop Master.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...

5.1CVSS6.2AI score0.00338EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/04/05 8:31 a.m.26 views

CVE-2025-3297 SourceCodester Online Eyewear Shop Master.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...

5.1CVSS0.00338EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/02/14 1:37 a.m.11 views

CVE-2024-35357

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deleteitem. Manipulating the argument id can result in SQL injection...

5.3CVSS7.7AI score0.00237EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/02/14 12:35 a.m.13 views

CVE-2024-35355

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deletecategory. Manipulating the argument id can result in SQL injection...

9.8CVSS7.7AI score0.00654EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/10/10 7:31 p.m.7 views

CVE-2024-9809 SourceCodester Online Eyewear Shop Master.php delete_product sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function deleteproduct of the file /classes/Master.php?f=deleteproduct. The manipulation of the argument id leads to sql injection. The attack can be launch...

6.5CVSS6.8AI score0.00429EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.2 views

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which originates in the file /classes/Master.php?f=deleteproduct where the parameter id of the function deleteproduct can lead to SQL...

6.5CVSS7AI score0.00429EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2024/09/28 9:0 p.m.10 views

CVE-2024-9317 SourceCodester Online Eyewear Shop Master.php delete_category sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function deletecategory of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack can be launched...

6.5CVSS7.4AI score0.00517EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/09/28 12:0 a.m.2 views

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Eyewear Shop version 1.0, which originates from an SQL injection issue contained in the id parameter in the /classes/Master.php?f=deletecategory...

8.8CVSS7AI score0.00517EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.3 views

PT-2024-39334 · Unknown · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical vulnerability has been found in the Cart Content Handler component of the SourceCodester Online Eyewear Shop. This issue affects an unknown part of the file...

8.8CVSS6.6AI score0.00702EPSS
Exploits0References9
Cvelist
Cvelist
added 2024/08/30 9:31 p.m.24 views

CVE-2024-8348 SourceCodester Computer Laboratory Management System Master.php delete_category sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function deletecategory of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The...

6.5CVSS0.0059EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/08/30 12:0 a.m.3 views

Computer Laboratory Management System SQL注入漏洞

Computer Laboratory Management System is an open source computer laboratory management system from SourceCodester. A SQL injection vulnerability exists in Computer Laboratory Management System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the...

9.8CVSS7AI score0.0059EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2024/08/27 10:31 p.m.9 views

CVE-2024-8223 SourceCodester Music Gallery Site Master.php sql injection

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

6.5CVSS6.9AI score0.0059EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/08/27 12:0 a.m.2 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by Carlo Montero's personal developer. A SQL injection vulnerability exists in Music Gallery Site version 1.0, which stems from the manipulation of the parameter id in the file /classes/Master.php?f=deletecategory that can lead to SQL injection...

9.8CVSS6.9AI score0.0059EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2024/08/22 10:0 p.m.12 views

CVE-2024-8083 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /php-ocls/classes/Master.php?f=payorder. The manipulation of the argument id leads to sql injection. The attac...

6.5CVSS7.3AI score0.0057EPSS
Exploits1References5
NVD
NVD
added 2024/08/12 1:38 p.m.12 views

CVE-2024-7668

A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function deletepackage of the file Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00447EPSS
Exploits1References4
Rows per page
Query Builder