Lucene search
K

16049 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 12:11 a.m.3 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS8.8AI score0.00052EPSS
Exploits3References1
EUVD
EUVD
added 2025/12/08 6:30 p.m.4 views

EUVD-2025-201798

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS8.1AI score0.00052EPSS
Exploits3References3
NVD
NVD
added 2025/12/08 6:15 p.m.3 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS0.00052EPSS
Exploits3References2
OSV
OSV
added 2025/12/08 11:15 a.m.4 views

CVE-2025-14229

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed...

8CVSS5.5AI score0.00039EPSS
Exploits1References5
NVD
NVD
added 2025/12/08 11:15 a.m.2 views

CVE-2025-14229

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed...

8CVSS0.00039EPSS
Exploits1References5
CVE
CVE
added 2025/12/08 11:2 a.m.8 views

CVE-2025-14229

CVE-2025-14229 affects SourceCodester Inventory Management System 1.0, targeting the SVC Report Export component. The vulnerability arises from a manipulation that enables CSV injection , with remote feasibility and a publicly disclosed exploit. Public sources consistently describe the issue but ...

8CVSS6.5AI score0.00039EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/08 11:2 a.m.2 views

CVE-2025-14229 SourceCodester Inventory Management System SVC Report Export csv injection

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed...

5.8CVSS6.5AI score0.00039EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/08 11:2 a.m.31 views

CVE-2025-14229 SourceCodester Inventory Management System SVC Report Export csv injection

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed...

5.8CVSS0.00039EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/08 11:2 a.m.3 views

EUVD-2025-201705

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed...

5.8CVSS6.3AI score0.00039EPSS
Exploits1References7
NVD
NVD
added 2025/12/08 7:15 a.m.2 views

CVE-2025-14221

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

5.4CVSS0.00028EPSS
Exploits2References5
OSV
OSV
added 2025/12/08 7:15 a.m.3 views

CVE-2025-14221

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

5.4CVSS4.3AI score0.00028EPSS
Exploits2References5
CVE
CVE
added 2025/12/08 7:2 a.m.8 views

CVE-2025-14221

CVE-2025-14221 affects SourceCodester Online Banking System 1.0. The vulnerability is a Cross-Site Scripting (XSS) issue in the user profile page, arising from unsanitized input in the First Name/Last Name fields processed by the /?page=user endpoint. Public exploit code indicates a stored XSS va...

5.4CVSS5.4AI score0.00028EPSS
Exploits2References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/08 7:2 a.m.3 views

CVE-2025-14221 SourceCodester Online Banking System page cross site scripting

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

5.1CVSS5.4AI score0.00028EPSS
Exploits2References5
EUVD
EUVD
added 2025/12/08 7:2 a.m.3 views

EUVD-2025-201668

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

5.1CVSS5.2AI score0.00028EPSS
Exploits2References6
Cvelist
Cvelist
added 2025/12/08 7:2 a.m.29 views

CVE-2025-14221 SourceCodester Online Banking System page cross site scripting

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

5.1CVSS0.00028EPSS
Exploits2References5
OSV
OSV
added 2025/12/08 1:16 a.m.3 views

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

7.5CVSS5.5AI score0.0015EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/08 12:2 a.m.2 views

EUVD-2025-201617

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.2AI score0.0015EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/08 12:2 a.m.3 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.3AI score0.0015EPSS
Exploits1References5
CVE
CVE
added 2025/12/08 12:2 a.m.6 views

CVE-2025-14206

CVE-2025-14206 affects SourceCodester Online Student Clearance System 1.0 in the Fee Table Handler, specifically /Admin/delete-fee.php. Manipulating the ID parameter can lead to improper authorization, with remote exploitation; public exploit details exist. Remediation guidance across connected s...

7.5CVSS6.2AI score0.0015EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.5 views

PT-2025-49420

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file...

7.5CVSS6.4AI score0.0015EPSS
Exploits1References9
Rows per page
Query Builder