Lucene search
+L

16368 matches found

Cvelist
Cvelist
added 2025/10/27 4:2 p.m.18 views

CVE-2025-12294 SourceCodester Point of Sales delete_category.php sql injection

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS0.00335EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/27 4:2 p.m.7 views

EUVD-2025-36217

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS6.8AI score0.00387EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/10/27 4:2 p.m.5 views

CVE-2025-12293 SourceCodester Point of Sales category.php sql injection

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS7.3AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 4:2 p.m.21 views

CVE-2025-12293

CVE-2025-12293 concerns SourceCodester Point of Sales 1.0. A SQL injection vulnerability arises from improper handling of the Category argument in the /category.php file, exploitable remotely. Multiple sources note the exploit is publicly available. Reported impacts include confidentiality, integ...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 4:2 p.m.20 views

CVE-2025-12293 SourceCodester Point of Sales category.php sql injection

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 3:32 p.m.16 views

CVE-2025-12292

SourceCodester Point of Sales 1.0 contains a SQL injection vulnerability in /index.php through manipulation of the Username parameter. This allows remote exploitation with no user interaction, as described across multiple sources (NVD, Red Hat, ENISA, CVE records). The vulnerability affects unkno...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 3:32 p.m.4 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/27 3:32 p.m.21 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/27 10:15 a.m.4 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS6.9AI score0.005EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 10:15 a.m.9 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS0.005EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 9:32 a.m.6 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.8AI score0.005EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 9:32 a.m.20 views

CVE-2025-12257

CVE-2025-12257 affects SourceCodester Online Student Result System 1.0. The vulnerability is a SQL injection in the view_result.php handler, triggered by improper handling of the ID parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly ...

9.8CVSS7.1AI score0.005EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/10/27 9:32 a.m.6 views

EUVD-2025-36141

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.6AI score0.005EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/10/27 9:32 a.m.20 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS0.005EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 5:2 a.m.6 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS4.9AI score0.00381EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/10/27 5:2 a.m.21 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS0.00381EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/27 3:2 a.m.22 views

CVE-2025-12208

SourceCodester Best House Rental Management System 1.0 is affected by a SQL injection in the login2 function of /admin_class.php, caused by improper handling of the Username argument. The vulnerability allows remote exploitation, and public proof-of-concept exploits exist. Red Hat/EUVD/NVD refere...

9.8CVSS6.8AI score0.00441EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.7 views

SourceCodester Point of Sales SQL注入漏洞

SourceCodester Point of Sales is an open source point of sale system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Point of Sales version 1.0, which stems from incorrect manipulation of the parameter Username in the file /index.php, which could lead to a SQL injectio...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.6 views

PT-2025-43976

Name of the Vulnerable Software and Affected Versions SourceCodester Point of Sales version 1.0 Description A flaw exists in SourceCodester Point of Sales 1.0 where manipulation of the Username argument in the file '/index.php' can lead to SQL injection. This issue can be exploited remotely. The...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.7 views

PT-2025-43880

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A flaw exists in the function save house within the file /admin class.php. Manipulation of the house no argument can lead to SQL injection. Remote exploitation is...

9.8CVSS6.9AI score0.00381EPSS
SaveExploits1References12
Rows per page
Query Builder