Lucene search
+L

16491 matches found

CVE
CVE
added 2025/06/07 6:00 p.m.79 views

CVE-2025-5840

SourceCodester Client Database Management System 1.0 contains a vulnerability in the file /user_update_customer_order.php where the uploaded_file parameter can be manipulated to achieve unrestricted file upload. This remote-access flaw could allow an attacker to upload arbitrary files, potentiall...

7.5CVSS7.2AI score0.00394EPSS
SaveExploits2References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/07 6:00 p.m.10 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.2AI score0.00394EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2025/06/07 6:00 p.m.33 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS0.00394EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
added 2025/06/07 9:04 a.m.23 views

CVE-2025-5649

A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/core/newuser of the component Register Interface. The manipulation leads to improper access controls. It is possible to initiate the attack...

6.9CVSS5.3AI score0.00502EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/07 12:00 a.m.7 views

SourceCodester Client Database Management System 代码问题漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which is caused by incorrect manipulation of the parameter uploadedfile in the fil...

7.5CVSS7.4AI score0.00394EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2025/06/07 12:00 a.m.15 views

PT-2025-24347 · Unknown · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. This issue affects an unknown part of the file /user update customer...

7.5CVSS7.1AI score0.00394EPSS
SaveExploits2References13
NVD
NVD
added 2025/06/06 11:15 a.m.21 views

CVE-2025-5758

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS0.00378EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/06 11:00 a.m.68 views

CVE-2025-5758

CVE-2025-5758 affects SourceCodester Open Source Clinic Management System v1.0. The vulnerability is a SQL injection in the /doctor.php file triggered by manipulating the doctorname parameter, with remote access possible and multiple parameters potentially affected. Exploitation details are publi...

7.5CVSS7.5AI score0.00378EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/06/06 11:00 a.m.26 views

CVE-2025-5758 SourceCodester Open Source Clinic Management System doctor.php sql injection

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS0.00378EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/06/06 11:00 a.m.11 views

CVE-2025-5758 SourceCodester Open Source Clinic Management System doctor.php sql injection

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS7.7AI score0.00378EPSS
SaveExploits1References5
NVD
NVD
added 2025/06/06 10:15 a.m.20 views

CVE-2025-5755

A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /emailconfig.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The...

7.5CVSS0.00378EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2025/06/06 9:31 a.m.28 views

CVE-2025-5755 SourceCodester Open Source Clinic Management System email_config.php sql injection

A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /emailconfig.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The...

7.5CVSS0.00378EPSS
SaveExploits2References5
CVE
CVE
added 2025/06/06 9:31 a.m.69 views

CVE-2025-5755

CVE-2025-5755 affects SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function in /email_config.php where manipulation of the email parameter causes SQL injection. Exploitation is remote and publicly disclosed; multiple sources list the vulnerability with PoC/attac...

7.5CVSS7.5AI score0.00378EPSS
SaveExploits2References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/06 9:31 a.m.12 views

CVE-2025-5755 SourceCodester Open Source Clinic Management System email_config.php sql injection

A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /emailconfig.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The...

7.5CVSS7.6AI score0.00378EPSS
SaveExploits2References5
OSV
OSV
added 2025/06/06 7:15 a.m.12 views

CVE-2025-5728

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be initiated remotely. Th...

8.8CVSS5.5AI score0.00386EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/06 7:15 a.m.6 views

CVE-2025-5727

A vulnerability classified as problematic has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/announcement of the component Announcement Page. The manipulation of the argument Title leads to cross site scripting. It is...

5.4CVSS3.8AI score0.00278EPSS
SaveExploits2References5
NVD
NVD
added 2025/06/06 7:15 a.m.20 views

CVE-2025-5728

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be initiated remotely. Th...

8.8CVSS0.00386EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/06/06 7:00 a.m.10 views

CVE-2025-5728 SourceCodester Open Source Clinic Management System manage_website.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be initiated remotely. Th...

6.5CVSS6.7AI score0.00386EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/06/06 7:00 a.m.26 views

CVE-2025-5728 SourceCodester Open Source Clinic Management System manage_website.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulnerability affects unknown code of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be initiated remotely. Th...

6.5CVSS0.00386EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/06 7:00 a.m.82 views

CVE-2025-5728

CVE-2025-5728 affects the SourceCodester Open Source Clinic Management System (v1.0). The vulnerability exists in an unspecified code path within the file /manage_website.php where manipulation of the website_image parameter enables an unrestricted upload. This can be triggered remotely and the e...

8.8CVSS7.2AI score0.00386EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder