Lucene search
K

7 matches found

CNNVD
CNNVD
added 2025/08/29 12:0 a.m.3 views

SourceCodester Bakeshop Online Ordering System 安全漏洞

SourceCodester Bakeshop Online Ordering System is a SourceCodester open source online ordering system. A security vulnerability exists in SourceCodester Bakeshop Online Ordering System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter phonenumber in the...

9.8CVSS7.7AI score0.00066EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-35251

Name of the Vulnerable Software and Affected Versions: SourceCodester Bakeshop Online Ordering System version 1.0 Description: A SQL injection issue exists in the /passwordrecover.php file due to manipulation of the phonenumber argument. This issue is remotely exploitable. The exploit has been ma...

7.5CVSS7.4AI score0.00066EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/23 2:55 a.m.1 views

CVE-2023-1735

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched...

9.8CVSS8.3AI score0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/06 11:4 a.m.15 views

CVE-2024-33958 SQL injection in Janobe E-Negosyo System

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter...

9.8CVSS7.3AI score0.00247EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/06 11:4 a.m.20 views

CVE-2024-33958 SQL injection in Janobe E-Negosyo System

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter...

9.8CVSS0.00247EPSS
Exploits0References1
OSV
OSV
added 2023/03/30 8:15 p.m.0 views

CVE-2023-1735

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/30 12:0 a.m.1 views

PT-2023-17200 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical vulnerability was found in the SourceCodester Young Entrepreneur E-Negosyo System. The issue affects an unknown functionality of the file...

9.8CVSS8.4AI score0.00232EPSS
Exploits0References5
Rows per page
Query Builder