Lucene search
+L

953 matches found

OSV
OSV
added 2025/11/20 3:17 p.m.8 views

CVE-2025-13450

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.4CVSS4.3AI score0.0023EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/20 3:17 p.m.4 views

CVE-2025-13451

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

9.8CVSS0.00392EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/20 3:17 p.m.18 views

CVE-2025-13450

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.4CVSS0.0023EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/20 3:2 a.m.17 views

CVE-2025-13451 SourceCodester Online Shop Project action.php sql injection

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

7.5CVSS0.00392EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/20 3:2 a.m.2 views

CVE-2025-13451 SourceCodester Online Shop Project action.php sql injection

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

7.5CVSS6.8AI score0.00392EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/20 3:2 a.m.8 views

EUVD-2025-198249

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

7.5CVSS6.7AI score0.00392EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/11/20 3:2 a.m.31 views

CVE-2025-13450 SourceCodester Online Shop Project register.php cross site scripting

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.1CVSS0.0023EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/20 3:2 a.m.6 views

EUVD-2025-198250

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.1CVSS5.4AI score0.0023EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.9 views

SourceCodester Online Shop Project 安全漏洞

SourceCodester Online Shop Project is a SourceCodester open source online store project. A security vulnerability exists in SourceCodester Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /shop/register.php, and could lead to a...

5.4CVSS4.4AI score0.0023EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.8 views

PT-2025-47553

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

5.1CVSS5.9AI score0.0023EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.5 views

SourceCodester Online Shop Project 安全漏洞

SourceCodester Online Shop Project is a SourceCodester open source online store project. A security vulnerability exists in SourceCodester Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter Search in the file /action.php, which could lead to a SQL injecti...

9.8CVSS7.7AI score0.00392EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/17 5:2 a.m.18 views

CVE-2025-13264

CVE-2025-13264 affects SourceCodester Online Magazine Management System 1.0, specifically the /view_magazine.php file. The vulnerability arises from manipulating the ID parameter, causing SQL injection. Remote exploitation is possible, and public PoCs exist. Multiple sources confirm the issue and...

8.8CVSS6.3AI score0.00343EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2025/11/17 4:32 a.m.20 views

CVE-2025-13263

SourceCodester Online Magazine Management System 1.0 contains a SQL injection in /categories.php via the c parameter. The issue is remote and publicly exploitable, with PoC-style exploit references present in the CVE metadata. The vulnerability affects unknown functionality in categories.php, and...

8.8CVSS6.5AI score0.00343EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 4:32 a.m.5 views

CVE-2025-13263 SourceCodester Online Magazine Management System categories.php sql injection

A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categories.php. The manipulation of the argument c leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

6.5CVSS6.4AI score0.00343EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.10 views

PT-2025-47119

Name of the Vulnerable Software and Affected Versions SourceCodester Online Magazine Management System version 1.0 Description A security flaw exists in SourceCodester Online Magazine Management System 1.0. The issue is located in the file /view magazine.php. Manipulation of the ID argument can...

6.5CVSS7.5AI score0.00343EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.10 views

PT-2025-47118

A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categories.php. The manipulation of the argument c leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

6.5CVSS7.2AI score0.00343EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.11 views

SourceCodester Online Magazine Management System SQL注入漏洞

SourceCodester Online Magazine Management System is a SourceCodester open source online magazine management system. A SQL injection vulnerability exists in SourceCodester Online Magazine Management System version 1.0, which stems from an incorrect manipulation of the parameter c in the file...

8.8CVSS7AI score0.00343EPSS
SaveExploits1References6
NVD
NVD
added 2025/10/27 10:15 a.m.8 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS0.005EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 9:32 a.m.19 views

CVE-2025-12257

CVE-2025-12257 affects SourceCodester Online Student Result System 1.0. The vulnerability is a SQL injection in the view_result.php handler, triggered by improper handling of the ID parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly ...

9.8CVSS7.1AI score0.005EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 9:32 a.m.6 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.8AI score0.005EPSS
SaveExploits1References5
Rows per page
Query Builder