Lucene search
+L

1328 matches found

Positive Technologies
Positive Technologies
•added 2025/04/20 12:00 a.m.•29 views

PT-2025-17405 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown function of the file...

4.8CVSS3.5AI score0.00412EPSS
SaveExploits1References17
CNNVD
CNNVD
•added 2025/04/20 12:00 a.m.•17 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which results from incorrect...

5.4CVSS4.1AI score0.00381EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/20 12:00 a.m.•25 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which is caused by an error in the...

4.8CVSS4.3AI score0.00412EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•5 views

CVE-2025-3826: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.8CVSS3.8AI score0.00396EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•5 views

CVE-2025-3823: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. ...

4.8CVSS3.8AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•8 views

CVE-2025-3822: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...

5.4CVSS3.6AI score0.00453EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•9 views

CVE-2025-3821: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file add-admin.php. The manipulation of the argument txtpassword/txtfullname/txtemail leads to cross site scripting. Th...

5.4CVSS3.6AI score0.00381EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•11 views

CVE-2025-3825: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategoryname leads to cross site scriptin...

4.8CVSS3.6AI score0.00396EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/18 6:15 a.m.•37 views

CVE-2025-3783

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

9.8CVSS5.5AI score0.00982EPSS
SaveExploits1References5
NVD
NVD
•added 2025/04/18 6:15 a.m.•30 views

CVE-2025-3783

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

9.8CVSS0.00982EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/18 5:31 a.m.•50 views

CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

6.5CVSS0.00982EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/18 5:31 a.m.•102 views

CVE-2025-3783

SourceCodester Web-based Pharmacy Product Management System 1.0 contains a vulnerability in /add-product.php where the Avatar parameter allows unrestricted file upload. This enables remote exploitation and is publicly disclosed per CVE-2025-3783. Several sources confirm the issue affects an unkno...

9.8CVSS6.5AI score0.00982EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/18 5:31 a.m.•16 views

CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

6.5CVSS7.2AI score0.00982EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/18 12:00 a.m.•7 views

CVE-2025-3783: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

9.8CVSS6.3AI score0.00982EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•25 views

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A security vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which is caused by an unrestricted upload du...

9.8CVSS6.5AI score0.00982EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/18 12:00 a.m.•21 views

PT-2025-17257 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /add-product.php. The manipulation of the Avatar argument leads to...

9.8CVSS6.3AI score0.00982EPSS
SaveExploits1References8
NVD
NVD
•added 2025/04/17 8:15 p.m.•46 views

CVE-2025-3764

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. T...

8.8CVSS0.00563EPSS
SaveExploits1References5
NVD
NVD
•added 2025/04/17 8:15 p.m.•31 views

CVE-2025-3765

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack may be...

8.8CVSS0.00563EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/04/17 8:15 p.m.•35 views

CVE-2025-3765

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack may be...

8.8CVSS5.5AI score0.00563EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/04/17 8:15 p.m.•27 views

CVE-2025-3764

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. T...

8.8CVSS6.3AI score0.00563EPSS
SaveExploits1References5
Rows per page
Query Builder