Lucene search
+L

16410 matches found

OSV
OSV
added 2025/08/26 5:15 p.m.4 views

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

6.1CVSS5.8AI score0.00288EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/26 5:15 p.m.11 views

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

6.1CVSS0.00288EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/26 6:15 a.m.9 views

CVE-2025-9476

A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /SuperadminDashboard/process/editemployeeprocess.php. Such manipulation of the argument employeefile201 leads to unrestricted upload. The attack...

9.8CVSS5.5AI score0.00494EPSS
SaveExploits1References6
OSV
OSV
added 2025/08/26 6:15 a.m.9 views

CVE-2025-9475

A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /AdminDashboard/process/editemployeeprocess.php. This manipulation of the argument employeefile201 causes unrestricted upload. The attack may be...

9.8CVSS5.5AI score0.00494EPSS
SaveExploits1References6
NVD
NVD
added 2025/08/26 6:15 a.m.9 views

CVE-2025-9475

A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /AdminDashboard/process/editemployeeprocess.php. This manipulation of the argument employeefile201 causes unrestricted upload. The attack may be...

9.8CVSS0.00494EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/08/26 6:2 a.m.4 views

CVE-2025-9476 SourceCodester Human Resource Information System editemployee_process.php unrestricted upload

A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /SuperadminDashboard/process/editemployeeprocess.php. Such manipulation of the argument employeefile201 leads to unrestricted upload. The attack...

7.5CVSS7.1AI score0.00494EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/08/26 6:2 a.m.19 views

CVE-2025-9476 SourceCodester Human Resource Information System editemployee_process.php unrestricted upload

A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /SuperadminDashboard/process/editemployeeprocess.php. Such manipulation of the argument employeefile201 leads to unrestricted upload. The attack...

7.5CVSS0.00494EPSS
SaveExploits1References6
OSV
OSV
added 2025/08/26 5:15 a.m.9 views

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/26 5:15 a.m.7 views

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

9.8CVSS0.00478EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/26 5:2 a.m.25 views

CVE-2025-9473

SourceCodester Online Bank Management System 1.0 has a SQL injection in /feedback.php triggered by manipulating the msg parameter. The vulnerability is remote and has public exploit discussion. Multiple sources describe the issue and its impact on confidentiality, integrity, and availability as h...

9.8CVSS7.5AI score0.00478EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/26 5:2 a.m.21 views

CVE-2025-9473 SourceCodester Online Bank Management System feedback.php sql injection

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

7.5CVSS0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/26 12:0 a.m.5 views

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

5.1AI score0.00288EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.8 views

SourceCodester Online Bank Management System 安全漏洞

SourceCodester Online Bank Management System is a SourceCodester open source online bank management system. A security vulnerability exists in SourceCodester Online Bank Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter msg in...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.9 views

PT-2025-34745

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Information System version 1.0 Description: A vulnerability exists in SourceCodester Human Resource Information System 1.0, specifically within an unknown functionality of the /Superadmin...

7.5CVSS7.2AI score0.00494EPSS
SaveExploits1References12
Cvelist
Cvelist
added 2025/08/26 12:0 a.m.17 views

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

0.00288EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/26 12:0 a.m.23 views

CVE-2025-57425

CVE-2025-57425 : A Stored Cross-Site Scripting (XSS) vulnerability affects SourceCodester FAQ Management System 1.0. The issue arises in the update-faq.php endpoint where the authenticated attacker can inject JavaScript into the question and answer fields due to inadequate input handling. Impact ...

6.1CVSS5.1AI score0.00288EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.9 views

SourceCodester Human Resource Information System 安全漏洞

SourceCodester Human Resource Information System is an open source human resource information system from SourceCodester. A security vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a misbehavior of the parameter employee in the file...

9.8CVSS7.4AI score0.00494EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.9 views

PT-2025-34743

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Information System version 1.0 Description: A flaw exists in SourceCodester Human Resource Information System 1.0 within an unknown functionality of the /Admin Dashboard/process/editemployee process.php file...

7.5CVSS7.3AI score0.00494EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.7 views

SourceCodester FAQ Management System 安全漏洞

SourceCodester FAQ Management System is an open source question and answer management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester FAQ Management System, which stems from the update-faq.php endpoint that does not clean up the question and answer...

6.1CVSS5.9AI score0.00288EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.9 views

SourceCodester Human Resource Information System 安全漏洞

SourceCodester Human Resource Information System is an open source human resource information system from SourceCodester. A security vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a misbehavior of the parameter employee in the file...

9.8CVSS7.4AI score0.00494EPSS
SaveExploits1References6
Rows per page
Query Builder