Lucene search
K

13 matches found

CNNVD
CNNVD
added 2026/03/27 12:0 a.m.3 views

SourceCodester Pharmacy Product Management System 安全漏洞

SourceCodester Pharmacy Product Management System is an open-source drug management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Product Management System contains a security vulnerability. This vulnerability arises from the fact that the add-sales.php file does...

7.5CVSS5.8AI score0.00055EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/31 11:5 a.m.4 views

CVE-2025-15244

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS6.2AI score0.00087EPSS
Exploits1References1
OSV
OSV
added 2025/12/30 11:15 a.m.1 views

CVE-2025-15244

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS5.1AI score
Exploits0References4
NVD
NVD
added 2025/12/30 11:15 a.m.4 views

CVE-2025-15244

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS0.00087EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/30 10:32 a.m.3 views

CVE-2025-15244 PHPEMS Purchase Request race condition

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS6.1AI score0.00087EPSS
Exploits1References4
CVE
CVE
added 2025/12/30 10:32 a.m.4 views

CVE-2025-15244

CVE-2025-15244 affects PHPEMS up to version 11.x, targeting the Purchase Request Handler. The issue is a race condition that can be triggered remotely; exploitation is described as high complexity with no required user interaction. Public PoC details exist, and multiple sources (NVD, Red Hat, CVE...

6.3CVSS6.1AI score0.00087EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/30 10:32 a.m.22 views

CVE-2025-15244 PHPEMS Purchase Request race condition

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS0.00087EPSS
Exploits1References4
EUVD
EUVD
added 2025/12/30 10:32 a.m.2 views

EUVD-2025-205762

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS5.9AI score0.00087EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.3 views

PT-2025-53863

Name of the Vulnerable Software and Affected Versions PHPEMS versions prior to 11.1 Description A flaw exists in PHPEMS related to the Purchase Request Handler component. This issue results in a race condition that can be triggered remotely. Exploitation requires a high level of complexity and is...

6.3CVSS6.3AI score0.00087EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.3 views

PHPEMS 竞争条件问题漏洞

PHPEMS is a PHP online practice exam system. A competitive condition issue vulnerability exists in PHPEMS version 11.0 and earlier, which stems from a competitive condition in the component Purchase Request Handler that could lead to a competitive condition attack...

6.3CVSS4.8AI score0.00087EPSS
Exploits1References4
CVE
CVE
added 2024/12/27 12:0 a.m.65 views

CVE-2024-53476

CVE-2024-53476 concerns SimplCommerce with commit 230310c8d7a0408569b292c5a805c459d47a1d8f. A race condition in the checkout logic allows attackers to bypass inventory restrictions by submitting purchase requests from multiple accounts for the same product, leading to overselling when stock is li...

5.9CVSS7.1AI score0.00474EPSS
Exploits0References3
Hacker One
Hacker One
added 2015/01/13 9:20 p.m.17 views

Vimeo: Buying ondemand videos that 0.1 and sometimes for free

hello sir this is N B Sri Harsha I Have found an IDOR where we can buy ondemand videos for free but i tested on 0.1$ here is what you should do go any ondemand video like https://vimeo.com/ondemand/snowman click on buy ! start the burp , you wil get an request like this POST...

7.2AI score
Exploits0
Cisco Threats
Cisco Threats
added 2013/06/24 1:37 p.m.6 views

Threat Outbreak Alert: Fake Product Purchase Request Email Messages on June 24, 2013

Low Alert ID: 29758 First Published: 2013 June 24 13:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase request for the recipient. The text in the email message attempts to convince the recipient to op...

0.3AI score
Exploits0
Rows per page
Query Builder