Lucene search
+L

1335 matches found

RedhatCVE
RedhatCVE
added 2025/12/04 12:30 p.m.13 views

CVE-2025-13795

A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01. Affected is an unknown function of the file /student-view.php of the component Edit Student Info Page. This manipulation of the argument First Name causes cross site scriptin...

4.8CVSS5.3AI score0.00214EPSS
SaveExploits0References1
Fedora
Fedora
added 2025/12/03 12:59 a.m.10 views

[SECURITY] Fedora 43 Update: openbao-2.4.4-1.fc43

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

7.5CVSS7AI score0.00617EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/01 6:13 a.m.14 views

CVE-2025-13783

A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminController. The manipulation of the argument...

9.8CVSS6.7AI score0.00282EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/01 3:21 a.m.14 views

CVE-2025-13782

A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file application/Admin/Controller/SlideController.class.php of the component SlideController. The manipulation of the argument ids leads to sql...

9.8CVSS7AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/01 2:2 a.m.17 views

CVE-2025-13802

Affects jairiidriss RestaurantWebsite (Make a Reservation component). The vulnerability is a cross-site scripting flaw caused by how the selected_date argument is handled. It is exploitable remotely and has been publicly disclosed. No affected versions or updated releases are specified. The vendo...

5.3CVSS5.3AI score0.0028EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/01 2:2 a.m.7 views

EUVD-2025-199948

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

5.3CVSS5.1AI score0.0028EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/01 12:30 a.m.7 views

EUVD-2025-199939

A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01. Affected is an unknown function of the file /student-view.php of the component Edit Student Info Page. This manipulation of the argument First Name causes cross site scriptin...

4.8CVSS5AI score0.00214EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/11/30 11:2 p.m.17 views

CVE-2025-13795 codingWithElias School Management System Edit Student Info student-view.php cross site scripting

A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01. Affected is an unknown function of the file /student-view.php of the component Edit Student Info Page. This manipulation of the argument First Name causes cross site scriptin...

4.8CVSS0.00214EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/30 6:30 p.m.7 views

EUVD-2025-199937

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/headermenu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lea...

5.3CVSS4.8AI score0.00276EPSS
SaveExploits0References5
OSV
OSV
added 2025/11/30 9:15 a.m.14 views

CVE-2025-13786

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

9.8CVSS5.6AI score0.00496EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/30 9:15 a.m.11 views

CVE-2025-13786

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

9.8CVSS0.00496EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/30 9:2 a.m.18 views

CVE-2025-13786 taosir WTCMS index.php fetch code injection

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

7.5CVSS0.00496EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/30 9:2 a.m.7 views

CVE-2025-13786 taosir WTCMS index.php fetch code injection

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack remotely. The exploit is now public...

7.5CVSS6.7AI score0.00496EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/30 9:2 a.m.17 views

CVE-2025-13786

CVE-2025-13786 affects taosir WTCMS. The vulnerability is in the fetch function of /index.php, where manipulation of the content parameter leads to code injection. Impact is remote execution with high severity; exploit publicly available. The product uses a rolling release, and the reports do not...

9.8CVSS6.7AI score0.00496EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/11/30 4:15 a.m.11 views

CVE-2025-13782

A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file application/Admin/Controller/SlideController.class.php of the component SlideController. The manipulation of the argument ids leads to sql...

9.8CVSS5.5AI score0.00344EPSS
SaveExploits0References5
NVD
NVD
added 2025/11/30 4:15 a.m.7 views

CVE-2025-13782

A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file application/Admin/Controller/SlideController.class.php of the component SlideController. The manipulation of the argument ids leads to sql...

9.8CVSS0.00344EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/30 12:0 a.m.20 views

PT-2025-48396

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/header menu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can le...

5.3CVSS5.2AI score0.00276EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/30 12:0 a.m.10 views

PT-2025-48398

Name of the Vulnerable Software and Affected Versions codingWithElias School Management System affected versions not specified Description A weakness exists in codingWithElias School Management System. The issue involves cross site scripting triggered by manipulating the First Name argument withi...

4.8CVSS3.1AI score0.00214EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/11/23 10:2 a.m.3 views

CVE-2025-13545 ashraf-kabir travel-agency index.php sql injection

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /adminarea/index.php. The manipulation of the argument editpack leads to sql injection. The attack can be...

5.8CVSS6.6AI score0.00374EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/11/23 9:30 a.m.6 views

EUVD-2025-198562

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customerregister.php. Executing manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

6.5CVSS6.1AI score0.00369EPSS
SaveExploits1References5
Rows per page
Query Builder