Lucene search
+L

16408 matches found

EUVD
EUVD
added 2025/10/08 5:2 p.m.6 views

EUVD-2025-33303

A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit is publicly available an...

6.5CVSS6.6AI score0.00323EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/08 5:2 p.m.18 views

CVE-2025-11486

CVE-2025-11486 affects SourceCodester Farm Management System 1.0. The vulnerability is in the /buyNow.php file, where manipulation of the Name parameter enables a SQL injection. It is described as remotely exploitable, with a publicly available exploit. The Red Hat/NVD/CVE records and related fee...

9.8CVSS6.8AI score0.00323EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/08 5:2 p.m.11 views

CVE-2025-11485 SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS5.6AI score0.00272EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/08 5:2 p.m.18 views

CVE-2025-11485 SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS0.00272EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 5:2 p.m.19 views

CVE-2025-11485

CVE-2025-11485 affects SourceCodester Student Grades Management System 1.0, specifically the add_user function in /admin.php within the Manage Users Page. The vulnerability arises from manipulating the first_name/last_name parameters, enabling cross-site scripting (XSS). The issue can be exploite...

4.8CVSS5.6AI score0.00272EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/08 4:47 p.m.8 views

CVE-2025-11399

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/saveroom.php. The manipulation of the argument floorno leads to sql injection. Remote exploitation of the attack is possible. The exploit has bee...

9.8CVSS7AI score0.00323EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/08 4:47 p.m.6 views

CVE-2025-11400

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /delroom.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

9.8CVSS7.1AI score0.00323EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/08 4:47 p.m.6 views

CVE-2025-11398

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unknown function of the file /profile.php of the component Profile Page. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be launched...

8.8CVSS6.8AI score0.00389EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/08 3:16 p.m.11 views

CVE-2025-60313

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...

6.1CVSS6.1AI score0.00331EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/08 3:16 p.m.12 views

CVE-2025-60313

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...

6.1CVSS0.00331EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/08 3:16 p.m.10 views

CVE-2025-11480

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...

9.8CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/08 3:16 p.m.5 views

CVE-2025-11479

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 2:32 p.m.4 views

CVE-2025-11480 SourceCodester Simple E-Commerce Bookstore register.php sql injection

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...

7.5CVSS6.7AI score0.00387EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/08 2:32 p.m.11 views

EUVD-2025-33308

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...

7.5CVSS6.5AI score0.00387EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/08 2:32 p.m.20 views

CVE-2025-11480

CVE-2025-11480 affects SourceCodester Simple E-Commerce Bookstore 1.0. The vulnerable component is an unknown function in /register.php, where manipulating the register_username parameter yields SQL injection. The issue enables remote exploitation and the exploit is public. Multiple connected sou...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 2:32 p.m.35 views

CVE-2025-11480 SourceCodester Simple E-Commerce Bookstore register.php sql injection

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 2:32 p.m.2 views

CVE-2025-11479 SourceCodester Wedding Reservation Management System function.php insertReservation sql injection

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.8AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 2:32 p.m.18 views

CVE-2025-11479

The CVE-2025-11479 affects SourceCodester Wedding Reservation Management System 1.0. The vulnerability is in the insertReservation function of function.php, caused by manipulation of the number argument leading to SQL injection. It can be exploited remotely and exploit details have been publicly ...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 2:32 p.m.18 views

CVE-2025-11479 SourceCodester Wedding Reservation Management System function.php insertReservation sql injection

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00387EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/08 2:32 p.m.8 views

EUVD-2025-33306

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References7
Rows per page
Query Builder