Lucene search
K

279 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-58840

Malicious code in bioql PyPI...

9.8CVSS6.1AI score0.00796EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-38700

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Forum Discussion System version 1.0 Description A security flaw exists in SourceCodester Simple Forum Discussion System version 1.0. The issue involves SQL injection, which can be triggered by manipulating the Description...

8.8CVSS6.4AI score0.00301EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/09/10 7:18 p.m.2 views

CVE-2025-10100

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

9.8CVSS7.4AI score0.00387EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/09/09 1:2 a.m.1 views

CVE-2025-10117 SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

5.1CVSS5.4AI score0.00289EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.3 views

PT-2025-36539

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A weakness exists in SourceCodester Simple To-Do List System that allows for cross site scripting. The issue is located in the /fetch tasks.php file, within the Add New Task...

5.4CVSS3.5AI score0.00289EPSS
Exploits1References8
NVD
NVD
added 2025/09/08 6:15 p.m.3 views

CVE-2025-10100

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

9.8CVSS0.00387EPSS
Exploits1References5
CVE
CVE
added 2025/09/08 6:2 p.m.14 views

CVE-2025-10100

CVE-2025-10100 affects SourceCodester Simple Forum Discussion System 1.0. The vulnerability is in the function handling the login endpoint, specifically the file path /admin_class.php?action=login, where manipulation of the Username parameter enables SQL injection. It is described as remotely exp...

9.8CVSS6.9AI score0.00387EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/08 12:0 a.m.2 views

PT-2025-36490

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Forum Discussion System version 1.0 Description: A SQL injection issue exists in the file /admin class.php?action=login. Manipulation of the Username parameter can lead to exploitation. The attack can be initiated...

9.8CVSS7.6AI score0.00387EPSS
Exploits1References10
NVD
NVD
added 2025/08/30 7:15 p.m.3 views

CVE-2025-9702

A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

9.8CVSS0.00383EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/07/01 9:22 p.m.8 views

CVE-2025-6871

A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS7.7AI score0.00454EPSS
Exploits1References1
NVD
NVD
added 2025/06/29 10:15 p.m.4 views

CVE-2025-6873

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely...

7.2CVSS0.00439EPSS
Exploits1References5
CVE
CVE
added 2025/06/29 9:32 p.m.16 views

CVE-2025-6873

The CVE-2025-6873 entry concerns SourceCodester Simple Company Website 1.0. A vulnerability in the processing of the file /classes/Users.php?f=save allows unrestricted upload by manipulating the img parameter. The issue can be triggered remotely, and public disclosure of the exploit is noted. Con...

7.2CVSS4.9AI score0.00439EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/29 8:32 p.m.2 views

CVE-2025-6871 SourceCodester Simple Company Website Login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7.5AI score0.00454EPSS
Exploits1References5
NVD
NVD
added 2025/06/29 8:15 p.m.6 views

CVE-2025-6870

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...

5.8CVSS0.00363EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/29 8:2 p.m.11 views

CVE-2025-6870 SourceCodester Simple Company Website Content.php unrestricted upload

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...

5.8CVSS0.00363EPSS
Exploits1References5
OSV
OSV
added 2025/06/29 7:15 p.m.3 views

CVE-2025-6867

A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

7.2CVSS5.8AI score0.0033EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/29 7:2 p.m.11 views

CVE-2025-6868 SourceCodester Simple Company Website manage.php sql injection

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

5.8CVSS0.00354EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/29 12:0 a.m.2 views

SourceCodester Simple Company Website 代码问题漏洞

SourceCodester Simple Company Website is a simple company website from SourceCodester, Inc. A code issue vulnerability exists in version 1.0 of the SourceCodester Simple Company Website, which stems from a misbehavior of the parameter img in the file /classes/Users.php?f=save that results in...

7.2CVSS5.1AI score0.00439EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.3 views

PT-2025-27385 · Sourcecodester · Sourcecodester Simple Company Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue has been found in the processing of the file /classes/Users.php?f=save, allowing for unrestricted upload through the manipulation of the img argument. This issue...

7.2CVSS7AI score0.00439EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.2 views

PT-2025-27380

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/testimonials/manage.php. The manipulation of the ID argument leads to SQL...

7.2CVSS5.7AI score0.00378EPSS
Exploits1References10
Rows per page
Query Builder