Lucene search
+L

16562 matches found

CVE
CVE
added 2025/04/16 2:31 p.m.78 views

CVE-2025-3694

CVE-2025-3694 affects SourceCodester Web-based Pharmacy Product Management System 1.0, specifically the Login Handler component. The root cause isSQL injection triggered by manipulating the login_email parameter in the login flow, allowing remote exploitation. Public exploit details are reference...

9.8CVSS7.5AI score0.00584EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/04/16 2:15 p.m.9 views

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS3.6AI score0.00353EPSS
SaveExploits1References5
NVD
NVD
added 2025/04/16 2:15 p.m.45 views

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS0.00353EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/16 1:31 p.m.102 views

CVE-2025-3692

CVE-2025-3692 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability lies in an unknown functionality exercised by the file /oews/classes/Master.php?f=save_product, enabling cross-site scripting. The attack is possible remotely and the exploit has been disclosed publicly. Connected sou...

5.4CVSS3.5AI score0.00353EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.24 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

0.0025EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.10 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

8.4AI score0.00712EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.31 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

0.00256EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.17 views

PT-2025-16782 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /edit-product.php. The manipulation of the ID argument leads to SQL...

8.8CVSS6.8AI score0.00487EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.5 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to misuse of the parameter shortnam...

4.8CVSS6AI score0.00256EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.27 views

CVE-2025-29710

SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting XSS via /dashboard/Services...

0.00286EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.9 views

PT-2025-16893 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue is related to Cross Site Scripting XSS via the /dashboard/Services API endpoint. This allows for potential malicious script injection. No information is provided about the...

6.1CVSS5.9AI score0.00286EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

Sourcecodester Online ID Generator System 安全漏洞

Sourcecodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in version 1.0 of the Sourcecodester Online ID Generator System, which stems from allowing the upload of arbitrary files and could lead to the executio...

9.8CVSS7.1AI score0.00712EPSS
SaveExploits1References2
CVE
CVE
added 2025/04/16 12:00 a.m.66 views

CVE-2024-40073

SourceCodester Online ID Generator System 1.0 is affected by a SQL injection vulnerability in the template parameter of id_generator/admin/?page=generate&template=4. The root cause is improper input handling leading to injection, exposing high-risk impact on confidentiality, integrity, and availa...

9.8CVSS8.3AI score0.00476EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from the portfolio feature not properly validating uploaded files, which could result in arbitrary fil...

9.8CVSS6.9AI score0.00587EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.7 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

5.9CVSS7.4AI score0.00235EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/16 12:00 a.m.9 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.3AI score0.00262EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.15 views

PT-2025-16898 · Unknown · Sourcecodester Simple Hotel Booking System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Hotel Booking System version 1.0 Description: A critical vulnerability was found in the Login function, where the manipulation of the uname argument leads to a buffer overflow. This issue can be exploited on the local...

7.8CVSS5.2AI score0.00311EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.30 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

0.00476EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.27 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

0.00712EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:00 a.m.26 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

0.00476EPSS
SaveExploits1References1
Rows per page
Query Builder