Lucene search
K

16072 matches found

OSV
OSV
added 2025/06/17 5:15 a.m.2 views

CVE-2025-6161

A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected is an unknown function of the file /editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS5.5AI score
Exploits0References5
NVD
NVD
added 2025/06/17 5:15 a.m.15 views

CVE-2025-6161

A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected is an unknown function of the file /editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS0.00563EPSS
Exploits1References5
NVD
NVD
added 2025/06/17 5:15 a.m.11 views

CVE-2025-6160

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

9.8CVSS0.00502EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/17 4:31 a.m.2 views

CVE-2025-6161 SourceCodester Simple Food Ordering System editproduct.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected is an unknown function of the file /editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The...

7.5CVSS7.2AI score0.00563EPSS
Exploits1References5
CVE
CVE
added 2025/06/17 4:31 a.m.32 views

CVE-2025-6161

CVE-2025-6161 affects SourceCodester Simple Food Ordering System 1.0. The vulnerability exists in an unknown function within the file /editproduct.php where manipulation of the photo parameter enables unrestricted file upload. The issue is remote and has public exploits disclosed. Multiple feeds ...

9.8CVSS7.2AI score0.00563EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/06/17 4:31 a.m.17 views

CVE-2025-6161 SourceCodester Simple Food Ordering System editproduct.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected is an unknown function of the file /editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The...

7.5CVSS0.00563EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/17 4:31 a.m.17 views

CVE-2025-6160 SourceCodester Client Database Management System user_customer_create_order.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

7.5CVSS0.00502EPSS
Exploits1References5
CVE
CVE
added 2025/06/17 4:31 a.m.25 views

CVE-2025-6160

CVE-2025-6160 affects SourceCodester Client Database Management System 1.0. Affects the file /user_customer_create_order.php where manipulation of the user_id parameter enables a SQL injection. The issue can be exploited remotely and, per sources, the exploit has been disclosed publicly. Public m...

9.8CVSS7.5AI score0.00502EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/17 4:31 a.m.3 views

CVE-2025-6160 SourceCodester Client Database Management System user_customer_create_order.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

7.5CVSS7.6AI score0.00502EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.2 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the paramete...

9.8CVSS7.8AI score0.00502EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/06/17 12:0 a.m.4 views

PT-2025-25618

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A critical issue has been found in the software, affecting the processing of the file /user customer create order.php. The manipulation of the user id argument leads to S...

9.8CVSS6.8AI score0.00502EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2025/06/17 12:0 a.m.3 views

PT-2025-25619 · Unknown · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /editproduct.php. The manipulation of the photo argument leads to unrestricted upload. It ...

9.8CVSS7.1AI score0.00563EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2025/06/12 11:22 p.m.5 views

CVE-2025-5984

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

5.4CVSS4.4AI score0.00236EPSS
Exploits0References1
NVD
NVD
added 2025/06/10 11:15 p.m.10 views

CVE-2025-5984

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

5.4CVSS0.00236EPSS
Exploits0References4
OSV
OSV
added 2025/06/10 11:15 p.m.3 views

CVE-2025-5984

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

5.4CVSS3.7AI score0.00236EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/06/10 10:31 p.m.16 views

CVE-2025-5984 SourceCodester Online Student Clearance System add-fee.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

5.1CVSS0.00236EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/06/10 10:31 p.m.5 views

CVE-2025-5984 SourceCodester Online Student Clearance System add-fee.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

5.1CVSS6.4AI score0.00236EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.3 views

SourceCodester Online Student Clearance System 代码注入漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from a cross-site scripting attack due to the incorrect operation ...

5.4CVSS4.9AI score0.00236EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/06/09 6:9 p.m.5 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.1AI score0.00378EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/06/08 11:16 a.m.9 views

CVE-2025-5758

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS7.7AI score0.00364EPSS
Exploits1References1
Rows per page
Query Builder