Lucene search
K

16049 matches found

CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

SourceCodester Inventory Management System 安全漏洞

SourceCodester Inventory Management System is a SourceCodester open source inventory management system. A security vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from a CSV injection vulnerability in the SVC report export component...

8CVSS5.3AI score0.00039EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.6 views

SourceCodester Online Student Clearance System 授权问题漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. An authorization issue vulnerability exists in version 1.0 of the SourceCodester Online Student Clearance System, which stems from incorrect manipulation of the parameter ID in the fil...

7.5CVSS6.4AI score0.0015EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/08 12:0 a.m.1 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

8.2AI score0.00052EPSS
Exploits3References2
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.1 views

SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞

SourceCodester Patients Waiting Area Queue Management System is SourceCodester open source a patient waiting area queue management system. SourceCodester Patients Waiting Area Queue Management System v1 version exists SQL injection vulnerability , the vulnerability stems from /...

9.8CVSS7.7AI score0.00052EPSS
Exploits3References3
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.2 views

PT-2025-49586

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1 Description A SQL injection issue exists in the /php/api patient schedule.php component. Attackers can execute arbitrary SQL commands by manipulating the appointmentID...

9.8CVSS8.1AI score0.00052EPSS
Exploits3References5
CVE
CVE
added 2025/12/08 12:0 a.m.9 views

CVE-2025-64081

CVE-2025-64081 is a SQL injection in SourceCodester’s Patients Waiting Area Queue Management System v1, affecting the file /php/api_patient_schedule.php via the appointmentID parameter. The root cause is improper input validation/sanitization, enabling attackers to execute arbitrary SQL commands....

9.8CVSS8.2AI score0.00052EPSS
Exploits3References2Affected Software1
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

SourceCodester Online Banking System 代码注入漏洞

SourceCodester Online Banking System is a SourceCodester open source online banking system. A code injection vulnerability exists in version 1.0 of the SourceCodester Online Banking System, which originates from the incorrect manipulation of the parameter First Name/Last Name in the file...

5.4CVSS4.6AI score0.00028EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49546

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed...

5.8CVSS6.9AI score0.00039EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/12/03 12:26 a.m.7 views

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

5.4CVSS6.2AI score0.0003EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/02 6:30 p.m.3 views

EUVD-2025-200293

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

6.1CVSS5.6AI score0.00033EPSS
Exploits1References3
NVD
NVD
added 2025/12/02 6:15 p.m.1 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

6.1CVSS0.00033EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.3 views

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in Sourcecodester Web-based Pharmacy Product Management System v1.0, which originates from a cross-site scripting attack on the...

6.1CVSS6.1AI score0.00033EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48725

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

5.4CVSS6.2AI score0.0003EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/02 12:0 a.m.2 views

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

5.8AI score0.0003EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

SourceCodester Student Grades Management System 安全漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A security vulnerability exists in Sourcecodester Student Grades Management System v1.0, which originates from a cross-site scripting attack on the Add New Subject Description field...

5.4CVSS6.1AI score0.0003EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

SourceCodester Zoo Management System 安全漏洞

SourceCodester Zoo Management System is a SourceCodester open source zoo management system. A security vulnerability exists in Sourcecodester Zoo Management System v1.0, which originates from a cross-site scripting vulnerability in /classes/Login.php...

6.1CVSS6.1AI score0.00039EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.1 views

PT-2025-48737

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /product expiry/add-supplier.php via the Supplier Name field...

6.1CVSS6.2AI score0.00033EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/11/25 7:7 a.m.5 views

CVE-2025-13586

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.2CVSS6.9AI score0.00026EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/24 7:30 p.m.5 views

CVE-2025-13565

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made...

9.1CVSS6.7AI score0.00134EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/24 6:34 p.m.5 views

CVE-2025-13561

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

9.8CVSS7.3AI score0.0003EPSS
Exploits1References1
Rows per page
Query Builder