Lucene search
K

16049 matches found

CNNVD
CNNVD
added 2025/10/11 12:0 a.m.1 views

SourceCodester Simple Inventory System SQL注入漏洞

SourceCodester Simple Inventory System is a SourceCodester open source simple inventory system. A SQL injection vulnerability exists in SourceCodester Simple Inventory System version 1.0, which stems from incorrect manipulation of the parameter editBrandName in the file /brand.php, which could le...

8.8CVSS7AI score0.0004EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.5 views

PT-2025-41701

Name of the Vulnerable Software and Affected Versions SourceCodester Best Salon Management System version 1.0 Description A security flaw exists in SourceCodester Best Salon Management System 1.0. The issue is a SQL injection affecting an unknown part of the file /panel/add invoice.php...

7.5CVSS7.7AI score0.00042EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.4 views

SourceCodester Best Salon Management System SQL注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A SQL injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from incorrect manipulation of the parameter editid in the file...

9.8CVSS7.8AI score0.00042EPSS
Exploits1References5
NVD
NVD
added 2025/10/10 4:15 p.m.3 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

8.8CVSS0.00092EPSS
Exploits1References2
OSV
OSV
added 2025/10/10 4:15 p.m.3 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

8.8CVSS5.8AI score0.00092EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.4 views

CVE-2025-11487

A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown functionality of the file /uploadProduct.php. Performing manipulation of the argument Type results in sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.2AI score0.00055EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.4 views

CVE-2025-11478

A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the...

8.8CVSS7AI score0.0004EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.6 views

CVE-2025-11485

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS5.8AI score0.00035EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.4 views

CVE-2025-11480

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...

9.8CVSS7AI score0.00042EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.4 views

CVE-2025-11476

A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument loginusername leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

9.8CVSS7.2AI score0.00042EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.4 views

SourceCodester Online Student Clearance System 安全漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A security vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which stems from improper access control and could allow a low-privileged user to spoof a...

8.8CVSS6.7AI score0.00092EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/09 9:31 p.m.3 views

EUVD-2025-33582

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

7.5AI score0.0004EPSS
Exploits1References3
OSV
OSV
added 2025/10/09 8:15 p.m.2 views

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

9.4CVSS5.8AI score0.0004EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/09 1:27 p.m.4 views

CVE-2025-11471

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS7AI score0.00042EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/09 1:27 p.m.1 views

CVE-2025-11472

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS6.9AI score0.00042EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/09 4:14 a.m.4 views

CVE-2025-11430

A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS7AI score0.00042EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which originates from improper handling of the parameter ID in the...

9.4CVSS7.7AI score0.0004EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/10/09 12:0 a.m.2 views

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

7.6AI score0.0004EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.3 views

PT-2025-41459

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description The software is susceptible to SQL Injection in the 'admin/view customer.php' file through the ID parameter. This allows for potential unauthorized access or modification ...

9.4CVSS7.6AI score0.0004EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/10/08 7:15 p.m.2 views

CVE-2025-11405

A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...

9.8CVSS7.4AI score0.00044EPSS
Exploits1References1
Rows per page
Query Builder