Lucene search
+L

19966 matches found

Cvelist
Cvelist
•added 2025/10/27 4:02 p.m.•29 views

CVE-2025-12294 SourceCodester Point of Sales delete_category.php sql injection

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS0.00364EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 4:02 p.m.•7 views

CVE-2025-12294 SourceCodester Point of Sales delete_category.php sql injection

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS5.5AI score0.00364EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 4:02 p.m.•32 views

CVE-2025-12294

SourceCodester Point of Sales 1.0 is affected by a SQL injection in the delete_category.php endpoint, triggered by manipulating the ID parameter. The vulnerability is exploitable remotely and has been publicly disclosed, with multiple sources confirming the issue and its impact. The root cause is...

9.8CVSS5.5AI score0.00364EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/27 4:02 p.m.•20 views

EUVD-2025-36216

A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /deletecategory.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may...

5.8CVSS6.5AI score0.00364EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/10/27 4:02 p.m.•29 views

CVE-2025-12293 SourceCodester Point of Sales category.php sql injection

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS0.00421EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 4:02 p.m.•14 views

EUVD-2025-36217

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS6.8AI score0.00421EPSS
SaveExploits1References6
CVE
CVE
•added 2025/10/27 4:02 p.m.•35 views

CVE-2025-12293

CVE-2025-12293 concerns SourceCodester Point of Sales 1.0. A SQL injection vulnerability arises from improper handling of the Category argument in the /category.php file, exploitable remotely. Multiple sources note the exploit is publicly available. Reported impacts include confidentiality, integ...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/27 4:02 p.m.•9 views

CVE-2025-12293 SourceCodester Point of Sales category.php sql injection

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 3:32 p.m.•27 views

CVE-2025-12292

SourceCodester Point of Sales 1.0 contains a SQL injection vulnerability in /index.php through manipulation of the Username parameter. This allows remote exploitation with no user interaction, as described across multiple sources (NVD, Red Hat, ENISA, CVE records). The vulnerability affects unkno...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/27 3:32 p.m.•33 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 3:32 p.m.•8 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS7AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/27 10:15 a.m.•14 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS6.9AI score0.00543EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 10:15 a.m.•18 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS0.00543EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 9:32 a.m.•9 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.9AI score0.00543EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 9:32 a.m.•37 views

CVE-2025-12257

CVE-2025-12257 affects SourceCodester Online Student Result System 1.0. The vulnerability is a SQL injection in the view_result.php handler, triggered by improper handling of the ID parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly ...

9.8CVSS6.9AI score0.00543EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/27 9:32 a.m.•38 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS0.00543EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 9:32 a.m.•17 views

EUVD-2025-36141

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.6AI score0.00543EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/10/27 5:02 a.m.•11 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS5.4AI score0.00414EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/10/27 5:02 a.m.•34 views

CVE-2025-12226 SourceCodester Best House Rental Management System admin_class.php save_house sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function savehouse of the file /adminclass.php. Performing manipulation of the argument houseno results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS0.00414EPSS
SaveExploits1References7
CVE
CVE
•added 2025/10/27 3:02 a.m.•37 views

CVE-2025-12208

SourceCodester Best House Rental Management System 1.0 is affected by a SQL injection in the login2 function of /admin_class.php, caused by improper handling of the Username argument. The vulnerability allows remote exploitation, and public proof-of-concept exploits exist. Red Hat/EUVD/NVD refere...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder