Lucene search
+L

16410 matches found

Cvelist
Cvelist
added 2025/09/08 2:2 a.m.19 views

CVE-2025-10078 SourceCodester Online Polling System candidates.php sql injection

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be use...

7.5CVSS0.00415EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/08 2:2 a.m.4 views

CVE-2025-10078 SourceCodester Online Polling System candidates.php sql injection

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be use...

7.5CVSS6.7AI score0.00415EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/08 2:2 a.m.23 views

CVE-2025-10078

SourceCodester Online Polling System 1.0 has a SQL injection in /admin/candidates.php via manipulated ID parameter. Root cause: improper handling of the ID value enables arbitrary SQL execution. Impact: remote exploitation possible with no authentication, potentially exposing or altering data (hi...

9.8CVSS7.3AI score0.00415EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/08 1:32 a.m.21 views

CVE-2025-10077 SourceCodester Online Polling System registeracc.php sql injection

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

7.5CVSS0.00412EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/08 1:32 a.m.4 views

CVE-2025-10077 SourceCodester Online Polling System registeracc.php sql injection

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

7.5CVSS7AI score0.00412EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/08 1:32 a.m.25 views

CVE-2025-10077

CVE-2025-10077 affects SourceCodester Online Polling System 1.0; vulnerable in /registeracc.php via manipulations of the email parameter, enabling SQL injection. Exploitation may be remote and has been publicly disclosed. Remediation guidance in related PTSecurity advisory suggests restricting ac...

9.8CVSS7.3AI score0.00412EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/09/08 1:15 a.m.8 views

CVE-2025-10076

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...

9.8CVSS0.00412EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/08 1:15 a.m.8 views

CVE-2025-10076

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...

9.8CVSS5.8AI score0.00412EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/08 1:15 a.m.9 views

CVE-2025-10075

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS4.2AI score0.00245EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/08 1:15 a.m.8 views

CVE-2025-10075

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS0.00245EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/08 1:2 a.m.23 views

CVE-2025-10076 SourceCodester Online Polling System manage-profile.php sql injection

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...

7.5CVSS0.00412EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/08 1:2 a.m.5 views

CVE-2025-10076 SourceCodester Online Polling System manage-profile.php sql injection

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...

7.5CVSS6.9AI score0.00412EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/08 1:2 a.m.31 views

CVE-2025-10076

CVE-2025-10076 affects SourceCodester Online Polling System 1.0. The vulnerability exists in the /manage-profile.php file where manipulation of the email parameter enables SQL injection. The issue can be exploited remotely and the exploit has circulated publicly. Impact is described as confidenti...

9.8CVSS7.3AI score0.00412EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/08 12:32 a.m.20 views

CVE-2025-10075 SourceCodester Online Polling System manage-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.1CVSS0.00245EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/08 12:32 a.m.27 views

CVE-2025-10075

SourceCodester Online Polling System 1.0 contains a cross-site scripting (XSS) flaw in /manage-profile.php triggered by manipulating the firstname parameter. The vulnerability can be exploited remotely and exploits have been released publicly. Multiple sources (NVD, Red Hat, CNNVD, PT-Security, a...

5.4CVSS4AI score0.00245EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/08 12:32 a.m.6 views

CVE-2025-10075 SourceCodester Online Polling System manage-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.1CVSS5.5AI score0.00245EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/08 12:0 a.m.8 views

PT-2025-36446

Name of the Vulnerable Software and Affected Versions: SourceCodester Time Tracker version 1.0 Description: A cross-site scripting XSS vulnerability exists due to manipulation of the project-name argument. The vulnerability affects an unknown function within the /index.html file. The exploit is...

5.4CVSS4AI score0.00278EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2025/09/08 12:0 a.m.9 views

PT-2025-36435

Name of the Vulnerable Software and Affected Versions: SourceCodester Pet Grooming Management Software version 1.0 Description: A vulnerability exists in SourceCodester Pet Grooming Management Software that allows for unrestricted file upload through manipulation of an unknown functionality withi...

8.8CVSS6.3AI score0.00417EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2025/09/08 12:0 a.m.4 views

SourceCodester Simple Forum Discussion System SQL注入漏洞

SourceCodester Simple Forum Discussion System is a SourceCodester open source forum system. A SQL injection vulnerability exists in SourceCodester Simple Forum Discussion System version 1.0, which originates from an incorrect manipulation of the parameter Username resulting in SQL injection...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/09/08 12:0 a.m.6 views

SourceCodester Time Tracker 代码注入漏洞

SourceCodester Time Tracker is an open source personal time tracking tool from SourceCodester. A code injection vulnerability exists in SourceCodester Time Tracker version 1.0, which stems from improper handling of parameters in the /index.html file, and could lead to cross-site scripting attacks...

5.4CVSS4.9AI score0.00278EPSS
SaveExploits1References6
Rows per page
Query Builder