Lucene search
+L

20049 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/13 12:00 a.m.•5 views

CVE-2025-13122: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of the file /php/apipatientcheckin.php. Performing manipulation of the argument appointmentID results in sql injection. It is possible to...

9.8CVSS7.1AI score0.00474EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•21 views

SourceCodester Patients Waiting Area Queue SQL注入漏洞

SourceCodester Patients Waiting Area Queue is an open source patient waiting area queuing system from SourceCodester. SourceCodester Patients Waiting Area Queue version 1.0 has a SQL injection vulnerability, the vulnerability stems from the improper handling of the appointmentID parameter in the...

9.8CVSS7.9AI score0.00474EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/12 8:15 p.m.•16 views

CVE-2025-13060

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/12 8:15 p.m.•19 views

CVE-2025-13059

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /managecareer.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available t...

9.8CVSS5.7AI score0.0035EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/12 8:15 p.m.•15 views

CVE-2025-13060

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS0.00478EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/12 8:15 p.m.•36 views

CVE-2025-13059

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /managecareer.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available t...

9.8CVSS0.0035EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/12 8:02 p.m.•8 views

CVE-2025-13060 SourceCodester Survey Application System view_survey.php sql injection

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/12 8:02 p.m.•35 views

CVE-2025-13060

CVE-2025-13060 affects SourceCodester Survey Application System 1.0. The issue is a SQL injection in the function handling the parameter ID in the file /view_survey.php. It can be exploited remotely, and multiple sources note that the exploit has been publicly disclosed. The vulnerability’s sever...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/12 8:02 p.m.•30 views

CVE-2025-13060 SourceCodester Survey Application System view_survey.php sql injection

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

7.5CVSS0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/12 8:02 p.m.•53 views

CVE-2025-13059

CVE-2025-13059 affects SourceCodester Alumni Management System 1.0. The vulnerability is a SQL injection in an unknown function of the file /manage_career.php caused by manipulation of the ID parameter. Remote exploitation is possible, and public exploits have been released. Impacts are described...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•6 views

CVE-2025-13060: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•17 views

SourceCodester Alumni Management System SQL注入漏洞

SourceCodester Alumni Management System is SourceCodester open source a Php, Mysql-based alumni management system. A SQL injection vulnerability exists in SourceCodester Alumni Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /managecareer.php...

9.8CVSS7AI score0.0035EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/12 12:00 a.m.•22 views

PT-2025-46706

Name of the Vulnerable Software and Affected Versions SourceCodester Alumni Management System version 1.0 Description A flaw exists in SourceCodester Alumni Management System 1.0. The issue is related to the manipulation of the ID argument within an unknown function of the /manage career.php file...

6.5CVSS6.6AI score0.0035EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/11/12 12:00 a.m.•26 views

PT-2025-46707

Name of the Vulnerable Software and Affected Versions SourceCodester Survey Application System version 1.0 Description A security issue exists in SourceCodester Survey Application System 1.0. The issue involves potential SQL injection through manipulation of the ID argument in the /view survey.ph...

7.5CVSS7.3AI score0.00478EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•15 views

SourceCodester Survey Application System SQL注入漏洞

SourceCodester Survey Application System is a SourceCodester open source survey application system. A SQL injection vulnerability exists in SourceCodester Survey Application System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /viewsurvey.php, which can lead...

9.8CVSS7.9AI score0.00478EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•8 views

CVE-2025-13059: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /managecareer.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available t...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/11 1:45 p.m.•20 views

CVE-2025-12939

A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /addCandidate.php. The manipulation of the argument candName results in sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS7.2AI score0.0035EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/11 5:42 a.m.•18 views

CVE-2025-12933

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/11 4:47 a.m.•14 views

CVE-2025-12930

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

9.8CVSS6.5AI score0.0035EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/11 3:47 a.m.•24 views

CVE-2025-12929

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References1
Rows per page
Query Builder