Lucene search
+L

16562 matches found

NVD
NVD
added 2025/04/16 5:15 p.m.27 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS0.00476EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.7 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS5.8AI score0.00476EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.27 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS0.00476EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.8 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS5.8AI score0.00262EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.20 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS0.0025EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.22 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.00712EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.6 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.1AI score0.00712EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.7 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS5.8AI score0.00235EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.8 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS6.1AI score0.0025EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.27 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS0.00235EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 3:16 p.m.25 views

CVE-2025-3694

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS0.00584EPSS
SaveExploits1References5
OSV
OSV
added 2025/04/16 3:16 p.m.7 views

CVE-2025-3697

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

8.8CVSS6.5AI score0.00487EPSS
SaveExploits1References5
NVD
NVD
added 2025/04/16 3:16 p.m.24 views

CVE-2025-3697

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

8.8CVSS0.00487EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/04/16 3:00 p.m.26 views

CVE-2025-3697 SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

6.5CVSS0.00487EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/16 3:00 p.m.79 views

CVE-2025-3697

The CVE-2025-3697 entry maps to a SQL injection in SourceCodester Web-based Pharmacy Product Management System 1.0, caused by improper handling of the ID parameter in /edit-product.php. A remote attacker could exploit this vulnerability, and public disclosures exist. The provided connected docume...

8.8CVSS6.8AI score0.00487EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/16 3:00 p.m.10 views

CVE-2025-3697 SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

6.5CVSS7.6AI score0.00487EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/16 2:31 p.m.79 views

CVE-2025-3696

The CVE-2025-3696 entry covers SourceCodester Web-based Pharmacy Product Management System 1.0. A SQL injection affects the /search/search_stock.php file via manipulation of the Name parameter. This can be exploited remotely, and multiple sources confirm the vulnerability exists in the unknown co...

8.8CVSS6.9AI score0.00487EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/16 2:31 p.m.10 views

CVE-2025-3696 SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/searchstock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. Th...

6.5CVSS7.8AI score0.00487EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/04/16 2:31 p.m.30 views

CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS0.00584EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/04/16 2:31 p.m.7 views

CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS7.7AI score0.00584EPSS
SaveExploits1References5
Rows per page
Query Builder