Lucene search
+L

20165 matches found

osv_cve
osv_cve
•added 2025/05/06 4:16 a.m.•21 views

CVE-2025-4312

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References5
NVD
NVD
•added 2025/05/06 4:16 a.m.•31 views

CVE-2025-4312

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS0.00639EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/06 4:00 a.m.•90 views

CVE-2025-4312

SourceCodester Advanced Web Store 1.0 contains a SQL injection vulnerability in /productdetail.php via the prodid parameter. The issue allows remote initiation and has been disclosed publicly. Exploitation details are provided across multiple sources (e.g., CVE-2025-4312, Red Hat advisory, PT Sec...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/05/06 4:00 a.m.•36 views

CVE-2025-4312 SourceCodester Advanced Web Store productdetail.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS0.00639EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/06 4:00 a.m.•15 views

CVE-2025-4312 SourceCodester Advanced Web Store productdetail.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7AI score0.00639EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•26 views

SourceCodester Advanced Web Store Injection Vulnerability

SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. An injection vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter txtLogin in the file /admin/index.php, which could lead to an SQL...

9.8CVSS7.1AI score0.00639EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•10 views

CVE-2025-4314: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/06 12:00 a.m.•25 views

PT-2025-19926

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A critical issue was found in the /Admin/login.php file, affecting unknown code. The manipulation of the username and password arguments leads to SQL injection. The attack...

9.8CVSS7.1AI score0.00639EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•10 views

CVE-2025-4331: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Student Clearance System 1.0. This vulnerability affects unknown code of the file /Admin/login.php. The manipulation of the argument id/username/password leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•6 views

CVE-2025-4313: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/adminaddnewproduct.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/06 12:00 a.m.•22 views

PT-2025-19831 · Sourcecodester · Sourcecodester Advanced Web Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced Web Store version 1.0 Description: A critical issue has been found in the processing of the file /productdetail.php. The manipulation of the prodid argument leads to SQL injection. The attack may be initiated remotely...

9.8CVSS6.8AI score0.00639EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/05/06 12:00 a.m.•25 views

PT-2025-19833 · Unknown · Sourcecodester Advanced Web Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced Web Store version 1.0 Description: A critical vulnerability was found in SourceCodester Advanced Web Store. The issue affects an unknown function of the file /admin/admin addnew product.php. The manipulation of the...

9.8CVSS6.8AI score0.00639EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•23 views

SourceCodester Online Student Clearance System SQL Injection Vulnerability

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. SourceCodester Online Student Clearance System version 1.0 suffers from a SQL injection vulnerability, which originates from improper manipulation of the parameters username/password i...

9.8CVSS7.1AI score0.00639EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•20 views

SourceCodester Advanced Web Store security vulnerabilities

SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. A security vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter txtProdId in the file /admin/adminaddnewproduct.php, which could lead to ...

9.8CVSS7.1AI score0.00639EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•19 views

SourceCodester Advanced Web Store security vulnerabilities

SourceCodester Advanced Web Store is a SourceCodester open source advanced web store. A security vulnerability exists in SourceCodester Advanced Web Store version 1.0, which stems from improper manipulation of the parameter prodid in the file /productdetail.php, which could lead to a SQL injectio...

9.8CVSS7.1AI score0.00639EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•7 views

CVE-2025-4312: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/06 12:00 a.m.•28 views

PT-2025-19834 · Sourcecodester · Sourcecodester Advanced Web Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced Web Store version 1.0 Description: A critical vulnerability has been found in SourceCodester Advanced Web Store. The issue affects an unknown functionality of the file /admin/index.php. The manipulation of the txtLogin...

9.8CVSS6.8AI score0.00639EPSS
SaveExploits1References12
NVD
NVD
•added 2025/05/05 7:15 p.m.•27 views

CVE-2025-4283

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

9.8CVSS0.00659EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/05/05 6:31 p.m.•40 views

CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

7.5CVSS0.00659EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/05/05 6:31 p.m.•14 views

CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

7.5CVSS7AI score0.00659EPSS
SaveExploits1References4
Rows per page
Query Builder