Lucene search
+L

16364 matches found

EUVD
EUVD
added 2025/11/20 3:2 a.m.9 views

EUVD-2025-198250

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.1CVSS5.4AI score0.0023EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/20 3:2 a.m.22 views

CVE-2025-13450

CVE-2025-13450 affects SourceCodester Online Shop Project 1.0. A vulnerability in the file /shop/register.php, via manipulation of the f_name argument, enables cross-site scripting. The flaw can be triggered remotely, and the exploit has been publicly disclosed. Several feeds (NVD, Red Hat, CVE l...

5.4CVSS3.8AI score0.0023EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/20 3:2 a.m.35 views

CVE-2025-13450 SourceCodester Online Shop Project register.php cross site scripting

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument fname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

5.1CVSS0.0023EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.8 views

PT-2025-47574

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete forum/delete career/delete comment/delete gallery/delete event of the file admin/admin class.php of the component Delete Handler. Executing manipulation of the argument ID can lea...

5.5CVSS5.5AI score0.00369EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.10 views

PT-2025-47553

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

5.1CVSS5.9AI score0.0023EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.9 views

SourceCodester Online Shop Project 安全漏洞

SourceCodester Online Shop Project is a SourceCodester open source online store project. A security vulnerability exists in SourceCodester Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /shop/register.php, and could lead to a...

5.4CVSS4.4AI score0.0023EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.8 views

SourceCodester Alumni Management System 安全漏洞

SourceCodester Alumni Management System is SourceCodester open source a Php, Mysql-based alumni management system. A security vulnerability exists in SourceCodester Alumni Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file admin/adminclass.php,...

8.1CVSS5.5AI score0.00369EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.6 views

SourceCodester Online Shop Project 安全漏洞

SourceCodester Online Shop Project is a SourceCodester open source online store project. A security vulnerability exists in SourceCodester Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter Search in the file /action.php, which could lead to a SQL injecti...

9.8CVSS7.7AI score0.00392EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/11/19 1:22 p.m.6 views

CVE-2025-13347

A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=saveuser. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been published...

8.8CVSS6.5AI score0.00299EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:20 p.m.12 views

CVE-2025-13345

A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=saveticket. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.5AI score0.00498EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:20 p.m.18 views

CVE-2025-13343

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS3.8AI score0.00367EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.19 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS6.6AI score0.00349EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/18 3:30 p.m.8 views

EUVD-2025-198003

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS5.5AI score0.00349EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/11/18 3:30 p.m.7 views

EUVD-2025-197991

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.1CVSS5.1AI score0.0025EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/18 3:16 p.m.9 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS4.4AI score0.00349EPSS
SaveExploits1References3
OSV
OSV
added 2025/11/18 3:16 p.m.6 views

CVE-2025-13349

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.4CVSS3.9AI score0.0025EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/18 3:16 p.m.5 views

CVE-2025-13347

A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=saveuser. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been published...

8.8CVSS0.00299EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/18 3:16 p.m.8 views

CVE-2025-13346

A vulnerability was detected in SourceCodester Train Station Ticketing System 1.0. This affects an unknown part of the file /ajax.php?action=savestation. Performing manipulation of the argument id/station results in sql injection. The attack may be initiated remotely. The exploit is now public an...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/18 2:2 p.m.23 views

CVE-2025-13349 SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.1CVSS0.0025EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/18 1:2 p.m.3 views

CVE-2025-13347 SourceCodester Train Station Ticketing System ajax.php sql injection

A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=saveuser. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been published...

6.5CVSS6.9AI score0.00299EPSS
SaveExploits1References5
Rows per page
Query Builder