Lucene search
+L

1328 matches found

RedhatCVE
RedhatCVE
•added 2025/09/24 4:13 a.m.•23 views

CVE-2025-10780

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument barcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

8.8CVSS6.4AI score0.00342EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/22 4:15 a.m.•13 views

CVE-2025-10780

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument barcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

8.8CVSS5.7AI score0.00342EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/22 4:15 a.m.•12 views

CVE-2025-10780

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument barcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

8.8CVSS0.00342EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/22 3:32 a.m.•36 views

CVE-2025-10780

CodeAstro Simple Pharmacy Management 1.0 is affected by a SQL injection in the /view.php handler caused by manipulation of the bar_code parameter. The vulnerability enables remote exploitation and has public exploits/disclosures. Affected component: /view.php, bar_code input; root cause: improper...

8.8CVSS6.4AI score0.00342EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/22 3:32 a.m.•5 views

CVE-2025-10780 CodeAstro Simple Pharmacy Management view.php sql injection

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument barcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

6.5CVSS6.4AI score0.00342EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/22 3:32 a.m.•27 views

CVE-2025-10780 CodeAstro Simple Pharmacy Management view.php sql injection

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument barcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

6.5CVSS0.00342EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•10 views

CodeAstro Simple Pharmacy Management 安全漏洞

CodeAstro Simple Pharmacy Management is a simple pharmacy management system from CodeAstro. A security vulnerability exists in CodeAstro Simple Pharmacy Management version 1.0, which stems from an incorrect manipulation of the parameter barcode in the file /view.php, which could lead to a SQL...

8.8CVSS6.9AI score0.00342EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•7 views

CVE-2025-10780: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument barcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

8.8CVSS6.4AI score0.00342EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•19 views

PT-2025-38682

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Pharmacy Management version 1.0 Description: A SQL injection issue exists due to the manipulation of the bar code argument in the /view.php file. Remote exploitation is possible. The exploit has been publicly disclosed...

8.8CVSS6.5AI score0.00342EPSS
SaveExploits1References8
NVD
NVD
•added 2025/09/15 10:15 p.m.•18 views

CVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged such as admin sessions and perform sensitive operations such as adding new users...

8.1CVSS0.00427EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/15 10:15 p.m.•20 views

CVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged such as admin sessions and perform sensitive operations such as adding new users...

8.1CVSS5.8AI score0.00427EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/09/15 12:00 a.m.•10 views

CVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged such as admin sessions and perform sensitive operations such as adding new users...

6.3AI score0.00427EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/15 12:00 a.m.•38 views

CVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is affected by an Incorrect Access Control flaw that lets low-privileged users forge sessions with admin-like privileges and perform sensitive actions (e.g., adding users). The CVE entry documents a high impact (CVE-2025-56274) with ...

8.1CVSS6.3AI score0.00427EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•10 views

CVE-2025-56274: Improper Access Control

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged such as admin sessions and perform sensitive operations such as adding new users...

8.1CVSS5.7AI score0.00427EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/09/15 12:00 a.m.•32 views

CVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged such as admin sessions and perform sensitive operations such as adding new users...

0.00427EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•15 views

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in the SourceCodester Web-based Pharmacy Product Management System version 1.0, which stems from improper access control and...

8.1CVSS6.5AI score0.00427EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/09/05 5:24 p.m.•18 views

CVE-2025-9921

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

5.4CVSS3.3AI score0.00294EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/03 5:15 p.m.•26 views

CVE-2025-9921

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

5.4CVSS4.2AI score0.00294EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/03 5:15 p.m.•15 views

CVE-2025-9921

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

5.4CVSS0.00294EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/03 5:02 p.m.•8 views

CVE-2025-9921 code-projects POS Pharmacy System products.php cross site scripting

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument productcode/genname/productname/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has be...

4.8CVSS5.5AI score0.00294EPSS
SaveExploits1References5
Rows per page
Query Builder