Lucene search
K

16049 matches found

RedhatCVE
RedhatCVE
added 2025/10/29 12:11 a.m.10 views

CVE-2025-12332

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS3AI score0.0005EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 4:54 p.m.3 views

CVE-2025-12293

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

9.8CVSS7.3AI score0.00031EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 4:54 p.m.3 views

CVE-2025-12294

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

9.8CVSS7.1AI score0.00028EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 9:51 a.m.9 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS7.3AI score0.00032EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 6:59 a.m.6 views

CVE-2025-12226

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS6.8AI score0.0004EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/28 12:31 a.m.3 views

EUVD-2025-36369

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS4.9AI score0.0005EPSS
Exploits1References7
NVD
NVD
added 2025/10/28 12:15 a.m.4 views

CVE-2025-12332

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS0.0005EPSS
Exploits1References6
OSV
OSV
added 2025/10/28 12:15 a.m.3 views

CVE-2025-12332

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS4AI score0.0005EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/10/27 11:22 p.m.3 views

CVE-2025-12332 SourceCodester Student Grades Management System admin.php delete_user cross site scripting

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS5.1AI score0.0005EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/10/27 11:22 p.m.10 views

CVE-2025-12332 SourceCodester Student Grades Management System admin.php delete_user cross site scripting

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS0.0005EPSS
Exploits1References6
CVE
CVE
added 2025/10/27 11:22 p.m.11 views

CVE-2025-12332

Summary: CVE-2025-12332 concerns SourceCodester Student Grades Management System 1.0. The vulnerability lies in the delete_user function in /admin.php, where manipulation can trigger cross-site scripting and may be exploited remotely. Multiple sources confirm that an exploit has been published. I...

4.8CVSS3AI score0.0005EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2025/10/27 9:15 p.m.2 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/10/27 9:15 p.m.2 views

CVE-2025-12325

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS0.00031EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 8:32 p.m.8 views

CVE-2025-12325

CVE-2025-12325 affects SourceCodester Best Salon Management System 1.0. The vulnerability is in panel/forgot-password.php where the email parameter is manipulated to cause SQL injection. It is exploitable remotely, and the exploit has been disclosed publicly. Public sources across multiple feeds ...

9.8CVSS6.8AI score0.00031EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/27 8:32 p.m.4 views

EUVD-2025-36340

A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS6.6AI score0.00031EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/27 6:31 p.m.3 views

EUVD-2025-36199

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS7.3AI score0.00031EPSS
Exploits1References6
NVD
NVD
added 2025/10/27 4:15 p.m.4 views

CVE-2025-12293

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

9.8CVSS0.00031EPSS
Exploits1References5
OSV
OSV
added 2025/10/27 4:15 p.m.1 views

CVE-2025-12292

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

9.8CVSS5.8AI score
Exploits0References5
OSV
OSV
added 2025/10/27 4:15 p.m.0 views

CVE-2025-12294

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

9.8CVSS5.8AI score
Exploits0References5
OSV
OSV
added 2025/10/27 4:15 p.m.2 views

CVE-2025-12293

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

9.8CVSS5.8AI score0.00031EPSS
Exploits1References5
Rows per page
Query Builder