SourceCodester Simple E-Commerce Bookstore 安全漏洞

SourceCodester Simple E-Commerce Bookstore is SourceCodester open source a simple e-commerce bookstore. A security vulnerability exists in SourceCodester Simple E-Commerce Bookstore version 1.0, which stems from an incorrect operation of the parameter remove in the file /cart.php, which could lea...

CVE-2025-60313: Improper Neutralization of Input During Web Page Generation

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...

CVE-2025-11473: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /editcurr.php. Such manipulation of the argument currsymbol leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

SourceCodester Student Grades Management System 安全漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A security vulnerability exists in SourceCodester Student Grades Management System version 1.0, which originates from an incorrect manipulation of the parameters firstname and lastnam...

PT-2025-41271

Name of the Vulnerable Software and Affected Versions Sourcecodester Link Status Checker version 1.0 Description The application is susceptible to a Cross-Site Scripting XSS issue in the 'Enter URLs to check' input field. This allows a remote attacker to execute arbitrary code. The vulnerable...

CVE-2025-11469: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...

PT-2025-41243

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A security issue exists in SourceCodester Hotel and Lodge Management System version 1.0. The issue allows for unrestricted file upload through manipulation of the website...

CVE-2025-11470: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0. The impacted element is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage/backloginimage leads to unrestricted upload. The attack is possible t...

CVE-2025-11471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-60313

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw within the 'Enter URLs to check' input field. Specifically, the URLs parameter fails to properly neutralize user-supplied input, allowing a remote attacker to execute arbitrary code. To mitigate this risk, i...

SourceCodester Link Status Checker 安全漏洞

SourceCodester Link Status Checker is an open source link status checker from SourceCodester. A security vulnerability exists in SourceCodester Link Status Checker version 1.0, which stems from the Enter URLs to check input field being vulnerable to a cross-site scripting attack that could lead t...

SourceCodester Farm Management System SQL注入漏洞

SourceCodester Farm Management System is a SourceCodester open source farm management system. A SQL injection vulnerability exists in SourceCodester Farm Management System version 1.0, which stems from an incorrect manipulation of the parameter Name in the file /buyNow.php, which could lead to a...

CVE-2025-60318

SourceCodester Pet Grooming Management Software version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of the fname (First Name) and lname (Last Name) fields in the /admin/profile.php component. An attacker could exploit this to inject malicious scripts into the we...

CVE-2025-11405

A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...

CVE-2025-11404

A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/savetax.php. Executing manipulation of the argument percentage can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-11404

A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/savetax.php. Executing manipulation of the argument percentage can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-11405

CVE-2025-11405 affects SourceCodester Hotel and Lodge Management System 1.0, with the vulnerability in the file /del_tax.php . The issue arises from manipulation of the parameter ID , leading to an SQL injection. The attack is remote and the exploit is publicly available . Documents indicate a co...

CVE-2025-11404

SourceCodester Hotel and Lodge Management System 1.0 is affected by CVE-2025-11404 due to an SQL injection in the /pages/save_tax.php file, caused by improper handling of the percentage parameter. An attacker can remotely exploit this vulnerability, and public disclosures exist. The vulnerability...

CVE-2025-11404 SourceCodester Hotel and Lodge Management System save_tax.php sql injection

A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/savetax.php. Executing manipulation of the argument percentage can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-11403

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this issue is some unknown functionality of the file /delbooking.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has...