CVE-2025-4025 itsourcecode Placement Management System registration.php sql injection

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploi...

CVE-2025-4024 itsourcecode Placement Management System add_drive.php sql injection

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /adddrive.php. The manipulation of the argument drivetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4024

CVE-2025-4024 affects itsourcecode Placement Management System 1.0. The vulnerable component is the /add_drive.php file, where manipulation of the drive_title parameter leads to an SQL injection. The vulnerability can be exploited remotely and an exploit has been disclosed publicly. Other paramet...

CVE-2025-4023

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addcompany.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has bee...

CVE-2025-4023

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addcompany.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has bee...

CVE-2025-4023

The CVE-2025-4023 entry concerns itsourcecode Placement Management System 1.0 with a SQL injection in the file /add_company.php triggered by manipulating the Name parameter. The vulnerability is exploitable remotely and could impact confidentiality, integrity, and availability as described in the...

CVE-2025-4023 itsourcecode Placement Management System add_company.php sql injection

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addcompany.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has bee...

CVE-2025-4023 itsourcecode Placement Management System add_company.php sql injection

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addcompany.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has bee...

PT-2025-18081 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical vulnerability has been found in the iSourcecode Placement Management System. The issue affects an unknown function of the file /add drive.php, where the manipulation ...

itsourcecode Placement Management System 注入漏洞

itsourcecode Placement Management System is an open source placement management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the...

itsourcecode Placement Management System 注入漏洞

itsourcecode Placement Management System is an open source placement management system by itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter drivetitle in...

PT-2025-18072 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical issue affects the processing of the file /add company.php. The manipulation of the Name argument leads to SQL injection. The attack may be initiated remotely. Other...

PT-2025-18082 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical vulnerability was found in the iSourcecode Placement Management System. The issue affects an unknown functionality of the file /registration.php. The manipulation of...

itsourcecode Placement Management System 注入漏洞

itsourcecode Placement Management System is an open source placement management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the...

CVE-2024-58248

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards...

nopCommerce 安全漏洞

nopCommerce is an open source, general purpose e-commerce platform from nopCommerce, Inc. A security vulnerability exists in nopCommerce versions prior to 4.80.0 that stems from a lack of locking mechanism for order placement, which could lead to double redemption of gift cards...

CVE-2024-58248

CVE-2024-58248 affects nopCommerce prior to 4.80.0 (public notes reference up to 4.90.1) where order placement lacks locking, enabling a race condition that can allow duplicate gift card redemption. Public advisories (NVD/Red Hat/OSV/Snyk) confirm the issue and cite a remediation to upgrade to ve...

CVE-2024-58248

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards...

PT-2025-16623

Name of the Vulnerable Software and Affected Versions nopCommerce versions prior to 4.80.0 Description The issue is related to a race condition that allows for the duplicate redeeming of gift cards due to the lack of locking for order placement. Recommendations For versions prior to 4.80.0, updat...

CVE-2024-58248

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards...