Lucene search
+L

20085 matches found

CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•12 views

SourceCodester Simple Forum Discussion System SQL Injection Vulnerability

SourceCodester Simple Forum Discussion System is a SourceCodester open source forum system. A SQL injection vulnerability exists in SourceCodester Simple Forum Discussion System version 1.0, which originates from an incorrect manipulation of the parameter Username resulting in SQL injection...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•38 views

PT-2025-36426

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A SQL injection issue exists in SourceCodester Online Polling System 1.0. Manipulation of the ID argument in the /admin/candidates.php file can lead to SQL injection. Remote...

9.8CVSS7.3AI score0.00415EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•11 views

CVE-2025-10088: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Time Tracker 1.0. The affected element is an unknown function of the file /index.html. Performing manipulation of the argument project-name results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be us...

5.4CVSS3.6AI score0.00285EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•8 views

CVE-2025-10083: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/profile.php. Executing manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS6.2AI score0.00394EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•11 views

CVE-2025-10081: Unrestricted Upload of File with Dangerous Type

A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument websiteimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be...

7.2CVSS5AI score0.00463EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•10 views

CVE-2025-10077: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

9.8CVSS7.1AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•3 views

CVE-2025-10085: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file managewebsite.php. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the...

8.8CVSS6.2AI score0.00378EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•6 views

CVE-2025-10078: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be use...

9.8CVSS7.2AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•11 views

CVE-2025-10075: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS3.5AI score0.0025EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•7 views

CVE-2025-10100: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•21 views

SourceCodester Online Polling System: SQL Injection Vulnerability

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. SourceCodester Online Polling System Code version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of parameters in the /registeracc.php file, which may lead to SQ...

9.8CVSS7.2AI score0.00412EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•25 views

PT-2025-36490

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Forum Discussion System version 1.0 Description: A SQL injection issue exists in the file /admin class.php?action=login. Manipulation of the Username parameter can lead to exploitation. The attack can be initiated...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•22 views

PT-2025-36425

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A security issue exists in SourceCodester Online Polling System 1.0. Manipulation of the email argument in the /registeracc.php file may lead to SQL injection. The attack can be...

9.8CVSS7.1AI score0.00412EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•24 views

PT-2025-36429

Name of the Vulnerable Software and Affected Versions: SourceCodester Pet Management System version 1.0 Description: A flaw has been found that allows for unrestricted file upload. This occurs through manipulation of the website image argument in an unknown function of the /admin/profile.php file...

7.2CVSS5.1AI score0.00463EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•21 views

SourceCodester Petshop Management System Code Issues and Vulnerabilities

SourceCodester Petshop Management System is SourceCodester open source a pet store management system . A code issue vulnerability exists in SourceCodester Petshop Management System version 1.0, which stems from improper handling of parameters in the /admin/profile.php file, which can lead to...

7.2CVSS5.6AI score0.00463EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•21 views

SourceCodester Online Polling System: SQL Injection Vulnerability

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. A SQL injection vulnerability exists in SourceCodester Online Polling System Code version 1.0, which stems from improper handling of parameters in the /manage-profile.php file, which can lead to SQL...

9.8CVSS7.2AI score0.00426EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•23 views

SourceCodester Online Polling System Code Injection Vulnerability

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. A code injection vulnerability exists in SourceCodester Online Polling System Code version 1.0, which stems from improper handling of parameters in the /manage-profile.php file, and could lead to...

5.4CVSS5AI score0.0025EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•24 views

SourceCodester Pet Grooming Management Software Code Issues and Vulnerabilities

SourceCodester Pet Grooming Management Software is a SourceCodester open source pet grooming management system. A code issue vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which originates from an arbitrary file upload vulnerability in the /admin/profile.php...

8.8CVSS6.7AI score0.00394EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•19 views

SourceCodester Online Polling System: SQL Injection Vulnerability

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. SourceCodester Online Polling System version 1.0 suffers from a SQL injection vulnerability, which originates from improper handling of parameters in the /admin/candidates.php file, which may lead to...

9.8CVSS7.2AI score0.00415EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•18 views

PT-2025-36446

Name of the Vulnerable Software and Affected Versions: SourceCodester Time Tracker version 1.0 Description: A cross-site scripting XSS vulnerability exists due to manipulation of the project-name argument. The vulnerability affects an unknown function within the /index.html file. The exploit is...

5.4CVSS4.9AI score0.00285EPSS
SaveExploits1References13
Rows per page
Query Builder