Lucene search
+L

20152 matches found

Vulnrichment
Vulnrichment
•added 2025/05/28 12:00 p.m.•41 views

CVE-2025-5299 SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS6.9AI score0.00686EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/28 11:31 a.m.•52 views

CVE-2025-5297 SourceCodester Computer Store System main.c Add stack-based overflow

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

5.3CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/28 11:31 a.m.•18 views

CVE-2025-5297 SourceCodester Computer Store System main.c Add stack-based overflow

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

5.3CVSS5.7AI score0.00335EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/28 12:00 a.m.•6 views

CVE-2025-45997: Unrestricted Upload of File with Dangerous Type

Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg...

8.6CVSS5.8AI score0.00508EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/28 12:00 a.m.•9 views

CVE-2025-5299: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS6.9AI score0.00686EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/28 12:00 a.m.•8 views

CVE-2025-5297: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

6.6CVSS5.8AI score0.00335EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•25 views

PT-2025-23087 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Web-based Pharmacy Product Management System version 1.0 Sourcecodester Web-based Pharmacy Product Management System version 0.0.1 Description: The issue allows an attacker to upload a PHP file disguised as an image by modifyin...

8.6CVSS5.9AI score0.00508EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•23 views

PT-2025-23078 · Sourcecodester · Sourcecodester Computer Store System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Store System version 1.0 Description: A critical issue has been found in the SourceCodester Computer Store System. This issue affects the function Add of the file main.c. The manipulation of the argument...

6.6CVSS5.8AI score0.00335EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•27 views

PT-2025-23081 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. The issue affects the file /user order customer update.php, where the...

7.5CVSS6.8AI score0.00686EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2025/05/28 12:00 a.m.•38 views

CVE-2025-45997

Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg...

0.00508EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•24 views

SourceCodester Web-based Pharmacy Product Management System Code-related Vulnerabilities

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in SourceCodester Web-based Pharmacy Product Management System v.1.0, which originates in the file upload functionality and cou...

8.6CVSS5.8AI score0.00508EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•25 views

SourceCodester Computer Store System security vulnerabilities

SourceCodester Computer Store System is an open source computer storage system from SourceCodester. A security vulnerability exists in SourceCodester Computer Store System version 1.0, which stems from improper handling of the laptopcompany/RAM/Processor parameter in the Add function in the main....

6.6CVSS6.2AI score0.00335EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•22 views

SourceCodester Client Database Management System Code-related Vulnerabilities

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which stems from improper handling of the uploadedfilecancelled parameter in the...

7.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/05/26 11:15 p.m.•25 views

CVE-2025-5208

A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack...

9.8CVSS7AI score0.00519EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/26 10:31 p.m.•18 views

CVE-2025-5208 SourceCodester Online Hospital Management System check_availability.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack...

7.5CVSS7AI score0.00519EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/26 10:31 p.m.•86 views

CVE-2025-5208

CVE-2025-5208 affects SourceCodester Online Hospital Management System 1.0. The vulnerability lies in /admin/check_availability.php where the emailid parameter is susceptible to SQL injection, enabling remote exploitation. Several connected documents corroborate the existence of a SQL injection i...

9.8CVSS7AI score0.00519EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/05/26 10:15 p.m.•28 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS0.00449EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/26 10:00 p.m.•18 views

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

5.8CVSS5.2AI score0.00449EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/26 10:00 p.m.•95 views

CVE-2025-5207

CVE-2025-5207 affects SourceCodester Client Database Management System 1.0. The vulnerability is an SQL injection in the file /superadmin_update_profile.php triggered by manipulating the nickname/email parameters, potentially exploitable remotely. Multiple connected sources corroborate the issue’...

9.8CVSS5.2AI score0.00449EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/05/26 10:00 p.m.•57 views

CVE-2025-5207 SourceCodester Client Database Management System superadmin_update_profile.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

5.8CVSS0.00449EPSS
SaveExploits1References5
Rows per page
Query Builder