Lucene search
+L

20054 matches found

NVD
NVD
•added 2025/10/27 10:15 a.m.•22 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS0.00543EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 9:32 a.m.•38 views

CVE-2025-12257

CVE-2025-12257 affects SourceCodester Online Student Result System 1.0. The vulnerability is a SQL injection in the view_result.php handler, triggered by improper handling of the ID parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly ...

9.8CVSS6.9AI score0.00543EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/27 9:32 a.m.•41 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS0.00543EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 9:32 a.m.•18 views

EUVD-2025-36141

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.6AI score0.00543EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/10/27 9:32 a.m.•12 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.9AI score0.00543EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 5:02 a.m.•36 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS0.00414EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/10/27 5:02 a.m.•13 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS5.4AI score0.00414EPSS
SaveExploits1References7
CVE
CVE
•added 2025/10/27 3:02 a.m.•41 views

CVE-2025-12208

SourceCodester Best House Rental Management System 1.0 is affected by a SQL injection in the login2 function of /admin_class.php, caused by improper handling of the Username argument. The vulnerability allows remote exploitation, and public proof-of-concept exploits exist. Red Hat/EUVD/NVD refere...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•9 views

CVE-2025-12226: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS5.4AI score0.00414EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•15 views

SourceCodester Point of Sales SQL注入漏洞

SourceCodester Point of Sales is an open source point of sale system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Point of Sales version 1.0, which stems from incorrect manipulation of the parameter Username in the file /index.php, which could lead to a SQL injectio...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•21 views

PT-2025-43916

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Result System version 1.0 Description A security issue exists in SourceCodester Online Student Result System 1.0. The system is susceptible to SQL injection due to improper handling of the ID parameter within the...

9.8CVSS7.5AI score0.00543EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•11 views

CVE-2025-12325: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS6.9AI score0.00505EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•8 views

CVE-2025-12294: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

9.8CVSS5.5AI score0.00364EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•7 views

CVE-2025-12293: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•7 views

CVE-2025-12292: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•20 views

SourceCodester Point of Sales SQL注入漏洞

SourceCodester Point of Sales is an open source point of sale system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Point of Sales version 1.0, which stems from incorrect manipulation of the parameter ID in the file /deletecategory.php, which could lead to a SQL...

9.8CVSS5.6AI score0.00364EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•16 views

PT-2025-43976

Name of the Vulnerable Software and Affected Versions SourceCodester Point of Sales version 1.0 Description A flaw exists in SourceCodester Point of Sales 1.0 where manipulation of the Username argument in the file '/index.php' can lead to SQL injection. This issue can be exploited remotely. The...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-12208: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•17 views

PT-2025-43980

Name of the Vulnerable Software and Affected Versions SourceCodester Point of Sales version 1.0 Description A SQL injection issue exists due to improper processing of the Category argument in the /category.php file. Remote attackers can exploit this to potentially compromise the system. The explo...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•23 views

PT-2025-44064

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0 Description A flaw exists in the Student Grades Management System that impacts the delete user function within the /admin.php file. Manipulation of this function can lead to cross sit...

4.8CVSS6AI score0.00382EPSS
SaveExploits1References10
Rows per page
Query Builder