357 matches found
CVE-2025-9702 SourceCodester Simple Cafe Billing System sales_report.php sql injection
A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...
CVE-2025-9702
CVE-2025-9702 affects SourceCodester Simple Cafe Billing System 1.0. The vulnerability is a SQL injection in the /sales_report.php file triggered by manipulating the month parameter, enabling remote exploitation. Multiple sources confirm this, with exploitation publicly available and high-severit...
CVE-2025-9702 SourceCodester Simple Cafe Billing System sales_report.php sql injection
A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
PT-2025-35379
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cafe Billing System version 1.0 Description: A SQL injection issue exists in SourceCodester Simple Cafe Billing System 1.0. The vulnerability is located in the /sales report.php file, affecting an unknown function...
Simple Cafe Billing System 安全漏洞
Simple Cafe Billing System is a cafe billing system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Cafe Billing System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter month in the file /salesreport.php...
CVE-2025-9599
A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...
CVE-2025-9599
A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...
CVE-2025-9599 itsourcecode Apartment Management System month_setup.php sql injection
A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...
CVE-2025-9599 itsourcecode Apartment Management System month_setup.php sql injection
A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/monthsetup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The...
CVE-2025-9599
The CVE-2025-9599 entry concerns itsourcecode Apartment Management System 1.0, with a SQL injection vulnerability in /setting/month_setup.php via the txtMonthName parameter. Multiple connected sources (CNVD, CNNVD, RH Red Hat style, CVE lists, VulnEnrichment, PT-2025-35163) describe an externally...
itsourcecode Apartment Management System 安全漏洞
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter txtMonthName in the file /setting/monthsetup.php. An attacker c...
PT-2025-35163
Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A weakness exists in an unknown functionality of the file /setting/month setup.php. Manipulation of the txtMonthName argument can lead to SQL injection. The attack can be...
Malicious code in simple-month-calendar (npm)
The package simple-month-calendar was found to contain malicious code...
Malicious code in test-mlw2-prowl-month (npm)
The package test-mlw2-prowl-month was found to contain malicious code...
MAL-2025-33275 Malicious code in simple-month-calendar (npm)
The package simple-month-calendar was found to contain malicious code...
The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived
The breach of the US Courts records system came to light more than a month after the attack was discovered. Details about what was exposed—and who’s responsible—remain unclear...
CVE-2023-27205
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/salesreport.php...