Lucene search
K

16049 matches found

NVD
NVD
added 2025/10/27 4:15 p.m.2 views

CVE-2025-12294

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

9.8CVSS0.00028EPSS
Exploits1References5
NVD
NVD
added 2025/10/27 4:15 p.m.4 views

CVE-2025-12292

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

9.8CVSS0.00031EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 4:2 p.m.7 views

CVE-2025-12294

SourceCodester Point of Sales 1.0 is affected by a SQL injection in the delete_category.php endpoint, triggered by manipulating the ID parameter. The vulnerability is exploitable remotely and has been publicly disclosed, with multiple sources confirming the issue and its impact. The root cause is...

9.8CVSS5.1AI score0.00028EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 4:2 p.m.8 views

CVE-2025-12294 SourceCodester Point of Sales delete_category.php sql injection

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS0.00028EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/27 4:2 p.m.4 views

EUVD-2025-36216

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS6.5AI score0.00028EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/10/27 4:2 p.m.3 views

CVE-2025-12294 SourceCodester Point of Sales delete_category.php sql injection

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS5AI score0.00028EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/27 4:2 p.m.3 views

EUVD-2025-36217

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS6.8AI score0.00031EPSS
Exploits1References6
CVE
CVE
added 2025/10/27 4:2 p.m.5 views

CVE-2025-12293

CVE-2025-12293 concerns SourceCodester Point of Sales 1.0. A SQL injection vulnerability arises from improper handling of the Category argument in the /category.php file, exploitable remotely. Multiple sources note the exploit is publicly available. Reported impacts include confidentiality, integ...

9.8CVSS7.2AI score0.00031EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 4:2 p.m.10 views

CVE-2025-12293 SourceCodester Point of Sales category.php sql injection

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS0.00031EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 4:2 p.m.2 views

CVE-2025-12293 SourceCodester Point of Sales category.php sql injection

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS7.3AI score0.00031EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 3:32 p.m.9 views

CVE-2025-12292

SourceCodester Point of Sales 1.0 contains a SQL injection vulnerability in /index.php through manipulation of the Username parameter. This allows remote exploitation with no user interaction, as described across multiple sources (NVD, Red Hat, ENISA, CVE records). The vulnerability affects unkno...

9.8CVSS7.3AI score0.00031EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 3:32 p.m.9 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS0.00031EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 3:32 p.m.1 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS7AI score0.00031EPSS
Exploits1References5
NVD
NVD
added 2025/10/27 10:15 a.m.3 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS0.00032EPSS
Exploits1References5
OSV
OSV
added 2025/10/27 10:15 a.m.1 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS6.9AI score
Exploits0References5
EUVD
EUVD
added 2025/10/27 9:32 a.m.3 views

EUVD-2025-36141

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.6AI score0.00032EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/10/27 9:32 a.m.10 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS0.00032EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 9:32 a.m.4 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.8AI score0.00032EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 9:32 a.m.8 views

CVE-2025-12257

CVE-2025-12257 affects SourceCodester Online Student Result System 1.0. The vulnerability is a SQL injection in the view_result.php handler, triggered by improper handling of the ID parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly ...

9.8CVSS7.1AI score0.00032EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 5:2 a.m.9 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS0.0004EPSS
Exploits1References7
Rows per page
Query Builder