Lucene search
+L

20170 matches found

NVD
NVD
•added 2025/02/03 1:15 p.m.•55 views

CVE-2024-57522

SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting XSS in Users.php. An attacker can inject a malicious script into the username or name field during user creation...

6.4CVSS0.01022EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•24 views

SourceCodester Packers and Movers Management System security vulnerabilities

SourceCodester Packers and Movers Management System is an open source packers and movers management system from Sourcecodester. A security vulnerability exists in version 1.0 of the SourceCodester Packers and Movers Management System, which stems from a cross-site scripting vulnerability in...

6.4CVSS5.4AI score0.01022EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•9 views

CVE-2024-57522: Improper Neutralization of Input During Web Page Generation

SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting XSS in Users.php. An attacker can inject a malicious script into the username or name field during user creation...

6.4CVSS5.8AI score0.01022EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/01/29 2:15 a.m.•18 views

CVE-2025-0800

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

4.8CVSS3.4AI score0.00438EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/01/29 2:15 a.m.•22 views

CVE-2025-0802

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

8.1CVSS6.7AI score0.00595EPSS
SaveExploits1References5
NVD
NVD
•added 2025/01/29 2:15 a.m.•60 views

CVE-2025-0800

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

5.1CVSS0.00438EPSS
SaveExploits1References4
NVD
NVD
•added 2025/01/29 2:15 a.m.•52 views

CVE-2025-0802

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

8.1CVSS0.00595EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/29 2:00 a.m.•56 views

CVE-2025-0802 SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

7.5CVSS0.00595EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/29 2:00 a.m.•100 views

CVE-2025-0802

CVE-2025-0802 affects SourceCodester Best Employee Management System 1.0 (Administrative Endpoint: /admin/View_user.php). The vulnerability causes improper access controls in the View_user.php function, enabling a remote attacker to access restricted functionality without required privileges. Mul...

8.1CVSS6.7AI score0.00595EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/01/29 1:31 a.m.•61 views

CVE-2025-0800 SourceCodester Online Courseware Edit Teacher saveeditt.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

5.1CVSS0.00438EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/29 1:31 a.m.•83 views

CVE-2025-0800

CVE-2025-0800 affects SourceCodester Online Courseware 1.0, specifically the Edit Teacher component (file /pcci/admin/saveeditt.php). The vulnerability arises from manipulation of the fname argument, enabling cross-site scripting. The issue can be triggered remotely, and public exploits exist. Mu...

5.1CVSS3.4AI score0.00438EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/01/29 12:00 a.m.•20 views

SourceCodester’s Best Employee Management System has security vulnerabilities

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A security vulnerability exists in SourceCodester Best Employee Management System version 1.0, which originates in the file /admin/Viewuser.php and can lead to improper access control...

8.1CVSS7.2AI score0.00595EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•5 views

CVE-2025-0800: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

5.1CVSS3.4AI score0.00438EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•7 views

CVE-2025-0802: Improper Access Control

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

8.1CVSS6.7AI score0.00595EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/01/14 5:15 p.m.•16 views

CVE-2025-0464

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

4.8CVSS3.2AI score0.00367EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/14 5:00 p.m.•81 views

CVE-2025-0464

SourceCodester Task Reminder System 1.0 is affected in the Maintenance Section. The vulnerability stems from the System Name parameter, enabling cross-site scripting (XSS). The attack can be launched remotely and the exploit has been disclosed publicly. Mitigation guidance available in connected ...

5.1CVSS3.2AI score0.00367EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/01/14 5:00 p.m.•43 views

CVE-2025-0464 SourceCodester Task Reminder System Maintenance Section cross site scripting

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

5.1CVSS0.00367EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•8 views

CVE-2025-0464: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

5.1CVSS3.3AI score0.00367EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•22 views

PT-2025-3900 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A problem was found in the Maintenance Section component of the system, affecting an unknown functionality. The issue arises from the manipulation of the System Name argument, leadi...

5.1CVSS3.6AI score0.00367EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•22 views

Sourcecodester House Rental Management System: Cross-site Script Vulnerabilities

Sourcecodester House Rental Management system is Sourcecodester open source house rental management system. A cross-site scripting vulnerability exists in Sourcecodester House Rental Management system v1.0, which originates in Rental/manageclassies.php and is vulnerable to cross-site scripting XS...

5.4CVSS5.5AI score0.00298EPSS
SaveExploits1References1
Rows per page
Query Builder