CVE-2025-9699

The CVE-2025-9699 entry concerns SourceCodester Online Polling System Code 1.0. A vulnerability exists in the file /admin/checklogin.php where manipulating the myusername parameter enables SQL injection. This is a remote exploit with public tooling/occurrence reported. Affected software is descri...

CVE-2025-9699 SourceCodester Online Polling System Code checklogin.php sql injection

A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now...

CVE-2025-9690 SourceCodester Advanced School Management System vendordetails sql injection

A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

Pet-Grooming-Management-RCE

Proof of Concept – Unrestricted File Upload in Pet Grooming Ma...

CVE-2025-9689

A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/itemselect. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now...

SourceCodester Water Billing System security vulnerabilities

SourceCodester Water Billing System is an open source water billing system from SourceCodester. A security vulnerability exists in SourceCodester Water Billing System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter ID in the file /viewbill.php...

CVE-2025-9705: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and coul...

CVE-2025-9706: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

SourceCodester Water Billing System security vulnerabilities

SourceCodester Water Billing System is an open source water billing system from SourceCodester. A security vulnerability exists in SourceCodester Water Billing System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter ID in the file /edit.php...

SourceCodester Water Billing System security vulnerabilities

SourceCodester Water Billing System is an open source water billing system from SourceCodester. A security vulnerability exists in SourceCodester Water Billing System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter ID in the file /paybill.php...

PT-2025-35359

Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced School Management System version 1.0 Description: A SQL injection issue exists in SourceCodester Advanced School Management System 1.0. The vulnerability is located in an unknown function within the /index.php/stock/it...

SourceCodester Online Book Store security vulnerabilities

SourceCodester Online Book Store is a SourceCodester open source online bookstore. A security vulnerability exists in SourceCodester Online Book Store version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter pubid in file /publisherlist.php...

SourceCodester Advanced School Management System security vulnerabilities

SourceCodester Advanced School Management System is an advanced school management system from SourceCodester open source. A security vulnerability exists in SourceCodester Advanced School Management System version 1.0, which originates from a SQL injection due to a misbehavior of parameter q in...

PT-2025-35375

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System Code version 1.0 Description: A SQL injection issue exists due to the manipulation of the myusername argument in the /admin/checklogin.php file. The attack can be performed remotely. The exploit is publicl...

CVE-2025-9699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now...

CVE-2025-9690: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

CVE-2025-9700: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Online Book Store 1.0. This issue affects some unknown processing of the file /publisherlist.php. This manipulation of the argument pubid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2025-9689: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/itemselect. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now...

SourceCodester Online Polling System Code Security Vulnerability

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. A security vulnerability exists in SourceCodester Online Polling System Code version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter myusername in the file...

CVE-2025-9704: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be...