Lucene search
K

5 matches found

EUVD
EUVD
added 2026/03/27 6:31 p.m.0 views

EUVD-2026-16676

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file specifically the savecustomer action. The application fails to properly sanitize user input supplied to the "username" parameter. This allows an attacker to inject malicious SQL command...

9.8CVSS6AI score0.00018EPSS
Exploits1References2
CVE
CVE
added 2026/03/27 12:0 a.m.4 views

CVE-2026-30530

SourceCodester Online Food Ordering System v1.0 is affected. In Actions.php, the save_customer action fails to sanitize the username parameter, enabling a SQL Injection due to improper input handling in user-supplied data. This could allow an attacker to inject arbitrary SQL commands through the ...

9.8CVSS6AI score0.00018EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/08 10:2 a.m.3 views

CVE-2025-11469 SourceCodester Hotel and Lodge Management System save_customer.php sql injection

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...

6.5CVSS6.7AI score0.0004EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.2 views

SourceCodester Hotel and Lodge Management System SQL注入漏洞

SourceCodester Hotel and Lodge Management System is a SourceCodester open source hotel and lodge management system. A SQL injection vulnerability exists in SourceCodester Hotel and Lodge Management System version 1.0, which stems from an incorrect manipulation of the parameter Contact in the file...

9.8CVSS7AI score0.0004EPSS
Exploits1References5
NVD
NVD
added 2025/09/14 11:15 p.m.2 views

CVE-2025-10414

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savecustomer. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit...

9.8CVSS0.0006EPSS
Exploits1References5
Rows per page
Query Builder