5 matches found
CVE-2025-13561
A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...
SourceCodester Company Website CMS 安全漏洞
SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from the portfolio feature not properly validating uploaded files, which could result in arbitrary fil...
CVE-2021-25197
Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...
PT-2021-16451
Name of the Vulnerable Software and Affected Versions: SourceCodester Content Management System version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter to the "content management systemadmin ew content.php" endpoint. This enables...
CVE-2021-25197: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...