Lucene search
K

2720 matches found

Cvelist
Cvelist
added 2025/09/02 8:32 p.m.10 views

CVE-2025-9832 SourceCodester Food Ordering Management System register-router.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS0.00415EPSS
Exploits1References6
CVE
CVE
added 2025/09/02 8:32 p.m.17 views

CVE-2025-9832

CVE-2025-9832 affects SourceCodester Food Ordering Management System 1.0. The vulnerability is in an unknown function within /routers/register-router.php where manipulation of the phone parameter enables SQL injection. It can be exploited remotely and exploit details have been publicly disclosed....

9.8CVSS7.2AI score0.00415EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.2 views

SourceCodester Food Ordering Management System 安全漏洞

SourceCodester Food Ordering Management System is a SourceCodester open source food ordering management system. A security vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which is caused by a SQL injection due to a mishandling of the parameter phone in the file...

9.8CVSS7.8AI score0.00415EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.4 views

PT-2025-35613

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A security issue exists in SourceCodester Food Ordering Management System 1.0. Manipulation of the phone argument in an unknown function within the...

9.8CVSS7.2AI score0.00415EPSS
Exploits1References9
OSV
OSV
added 2025/08/29 5:15 p.m.1 views

CVE-2025-9660

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS5.7AI score0.00483EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/29 4:32 p.m.4 views

CVE-2025-9660 SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

7.5CVSS6.8AI score0.00483EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2023-46137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web...

5.3CVSS6.1AI score0.00766EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-10868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated us...

6.5CVSS5.3AI score0.01277EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-15365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sql/eventdataobjects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3...

8.8CVSS7.7AI score0.0335EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/17 9:24 a.m.9 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS7.6AI score0.00308EPSS
Exploits1References1
OSV
OSV
added 2025/08/15 9:15 a.m.3 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS5.8AI score0.00308EPSS
Exploits1References5
NVD
NVD
added 2025/08/15 9:15 a.m.5 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS0.00308EPSS
Exploits1References5
CVE
CVE
added 2025/08/15 9:2 a.m.19 views

CVE-2025-9025

The CVE concerns code-projects Simple Cafe Ordering System 1.0. The vulnerability exists in portal.php where the ID parameter is used unsafely, allowing SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed. Connected sources corroborate the same flaw acro...

8.8CVSS7.5AI score0.00308EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/15 9:2 a.m.6 views

CVE-2025-9025 code-projects Simple Cafe Ordering System portal.php sql injection

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

6.5CVSS7.5AI score0.00308EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.5 views

PT-2025-33470 · Unknown · Simple Cafe Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...

8.8CVSS6.6AI score0.00308EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-47189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix memory ordering between normal and ordered work functions Ordered work functions aren't guaranteed to be handled by the same thread which executed th...

6.3CVSS6.8AI score0.00921EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-49935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf/dma-resv: check if the new fence is really later Previously when we added a fence to a dmaresv object we always assumed the the newer than all the...

7.8CVSS6.4AI score0.00145EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/08/07 12:0 a.m.4 views

The vulnerability of the btrfs_prelim_ref() function in the include/trace/events/btrfs.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btrfsprelimref function in the include/trace/events/btrfs.h module of the Linux operating system’s kernel is related to the improper ordering of pointer manipulation during calls to old and new variables. Exploiting this vulnerability can allow an attacker to cause a...

5.5CVSS6.4AI score0.00172EPSS
Exploits0References17Affected Software4
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.4 views

PT-2025-40073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the mm/userfaultfd subsystem related to the ordering of kmap local operations when CONFIG HIGHPTE is enabled on 32-bit ARM architectures...

5.5CVSS8.3AI score0.00132EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/30 4:28 a.m.9 views

CVE-2025-8256

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS6.4AI score0.00379EPSS
Exploits1References1
Rows per page
Query Builder