16560 matches found
CVE-2025-46191
Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...
SourceCodester Online Student Clearance System 代码注入漏洞
SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from cross-site scripting due to a parameter Username operation in...
CVE-2025-46192
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
PT-2025-20542 · Unknown · Sourcecodester Online Student Clearance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Clearance System version 1.0 Description: A problematic issue has been found in the system, where the manipulation of the Username argument leads to cross-site scripting. This can be launched remotely. The issue...
CVE-2025-46191
Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...
CVE-2025-46193
Summary: CVE-2025-46193 affects SourceCodester Client Database Management System 1.0 and enables remote code execution via an arbitrary file upload in the vulnerable file path user_proposal_update_order.php. The CVSS v3.1 score is 9.8 (CRITICAL) with network attack vector, no privileges required,...
SourceCodester Client Database Management System 安全漏洞
SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...
CVE-2025-46190
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...
PT-2025-20526 · Sourcecodester · Sourcecodester Online Student Clearance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Clearance System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Student Clearance System. This issue affects unknown code in the file /admin/edit-admin.php. The...
CVE-2025-46188
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in the superadmin_phpmyadmin.php file. The root cause is insufficient input validation in the affected file, enabling high-impact access to confidential data, potential manipulation, and disruption (CVSS 3.1 base ...
PT-2025-20581
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The application lacks proper file extension checks, MIME type validation, and authentication when handling file uploads through the user payment update.php script...
PT-2025-20576
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...
CVE-2025-46192
CVE-2025-46192 affects SourceCodester Client Database Management System 1.0. Vulnerable component: user_payment_update.php, where SQL injection is possible via the order_id POST parameter due to improper input handling. Impact per CVSS: high confidentiality, integrity, and availability; overall c...
SourceCodester Online Student Clearance System 代码注入漏洞
SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from cross-site scripting due to the operation of parameter Fullna...
PT-2025-20575
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to SQL Injection through the superadmin phpmyadmin.php file. The issue allows for potential...
CVE-2025-46188
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...
SourceCodester Client Database Management System 安全漏洞
SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...
SourceCodester Client Database Management System 安全漏洞
SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from an SQL injection in superadminphpmyadmin.php...