Lucene search
+L

3640 matches found

CNNVD
CNNVD
•added 2025/12/25 12:00 a.m.•13 views

itsourcecode Online Frozen Foods Ordering System SQL注入漏洞

itsourcecode Online Frozen Foods Ordering System is itsourcecode open source online frozen food ordering system . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Frozen Foods Ordering System, which stems from a misuse of unknown code in the file /customerdetails.php,...

9.8CVSS7.8AI score0.00458EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/25 12:00 a.m.•20 views

PT-2025-53384

Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0 Description A SQL injection issue exists in the itsourcecode Online Frozen Foods Ordering System version 1.0. The issue affects unknown code within the /customer details.php file...

9.8CVSS7.6AI score0.00458EPSS
SaveExploits1References11
osv_cve
osv_cve
•added 2025/12/24 11:15 p.m.•18 views

CVE-2025-15073

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

9.8CVSS5.7AI score0.00423EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/24 11:15 p.m.•17 views

CVE-2025-15073

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

9.8CVSS0.00423EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/24 11:02 p.m.•8 views

CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

7.5CVSS6.9AI score0.00423EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/24 11:02 p.m.•54 views

CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

7.5CVSS0.00423EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2025/12/24 1:16 p.m.•10 views

CVE-2023-54118

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: setup GPIO controller later in probe The GPIO controller component of the sc16is7xx driver is setup too early, which can result in a race condition where another device tries to utilise the GPIO lines before th...

5.8AI score0.00208EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/12/24 1:06 p.m.•12 views

CVE-2023-54107 blk-cgroup: dropping parent refcount after pd_free_fn() is done

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pdfreefn is done Some cgroup policies will access parent pd through child pd even after pdofflinefn is done. If pdfreefn for parent is called before child, then UAF can be triggered. Hen...

7.8CVSS6.4AI score
SaveExploits0References4
NVD
NVD
•added 2025/12/24 11:15 a.m.•11 views

CVE-2023-53998

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation, that is, when the...

0.00211EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•7 views

CVE-2025-15073: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

9.8CVSS6.9AI score0.00423EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•15 views

itsourcecode Online Frozen Foods Ordering System SQL注入漏洞

itsourcecode Online Frozen Foods Ordering System is itsourcecode open source online frozen food ordering system . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Frozen Foods Ordering System, which stems from an incorrect manipulation of the parameter Name in the file...

9.8CVSS7.7AI score0.00423EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/21 12:00 a.m.•30 views

PT-2026-46033

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the rt9455 power supply driver. The problem occurs because the interrupt request IRQ is requested before the power supply handle is allocated and...

8.4CVSS6.3AI score0.0019EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/12/21 12:00 a.m.•30 views

PT-2026-43769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq256xx power supply driver. The problem occurs because the devm variant for requesting an IRQ is used before the devm variant for allocating or...

7.8CVSS6.1AI score0.00171EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/18 10:37 p.m.•16 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/18 12:34 a.m.•25 views

EUVD-2025-204018

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/12/17 10:15 p.m.•21 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/17 10:02 p.m.•8 views

CVE-2025-14832 itsourcecode Online Cake Ordering System updateproduct.php sql injection

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/17 10:02 p.m.•29 views

CVE-2025-14832

The affected software is itsourcecode Online Cake Ordering System v1.0. The vulnerability lies in the file /updateproduct.php?action=edit where manipulation of the ID parameter enables SQL injection, enabling remote exploitation. Multiple connected sources corroborate a publicly available exploit...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/17 10:02 p.m.•42 views

CVE-2025-14832 itsourcecode Online Cake Ordering System updateproduct.php sql injection

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS0.00387EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/12/17 8:07 a.m.•17 views

CVE-2025-9612

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...

5.1CVSS7.6AI score0.00137EPSS
SaveExploits0References1
Rows per page
Query Builder