Lucene search
K

16072 matches found

CNNVD
CNNVD
added 2025/05/05 12:0 a.m.2 views

SourceCodester Stock Management System 注入漏洞

SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which stems from improper handling of the parameter Username in the file /classes/Login.php, which can lead ...

9.8CVSS7.9AI score0.00472EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.3 views

SourceCodester Stock Management System 安全漏洞

SourceCodester Stock Management System is a SourceCodester open source stock management system. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which stems from an improper handling in the file /classes/Users.php, which could lead to a cross-site request...

8.8CVSS4.9AI score0.00274EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.2 views

SourceCodester Web Based Pharmacy Product Management System 安全漏洞

SourceCodester Web Based Pharmacy Product Management System is an open source web-based pharmaceutical management system from SourceCodester. A security vulnerability exists in SourceCodester Web Based Pharmacy Product Management System version 1.0, which originates from an unvalidated Fullname...

6.1CVSS6.1AI score0.00241EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.2 views

SourceCodester Stock Management System 注入漏洞

SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from improper handling of the parameter ID in the file /admin/?page=purchaseorder/viewpo,...

7.2CVSS5.7AI score0.00392EPSS
Exploits1References5
CVE
CVE
added 2025/05/05 12:0 a.m.51 views

CVE-2025-45751

CVE-2025-45751 affects SourceCodester Web Based Pharmacy Product Management System 1.0. The issue is a Cross Site Scripting (XSS) vulnerability in add-admin.php via the Fullname field, with root cause an unvalidated Fullname input. Potential impact is client-side script execution in the context o...

6.1CVSS5.8AI score0.00241EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.4 views

PT-2025-19762 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Login.php?f=login, where the manipulation of the Username argument leads to SQL injection. The attack can b...

9.8CVSS7.8AI score0.00472EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.3 views

PT-2025-19708 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web Based Pharmacy Product Management System version 1.0 Description: The issue concerns Cross Site Scripting XSS in the add-admin.php file via the Fullname text field. This allows for potential malicious script injection...

6.1CVSS5.2AI score0.00241EPSS
Exploits1References6
OSV
OSV
added 2025/05/04 6:15 a.m.4 views

CVE-2025-4248

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.8AI score0.00402EPSS
Exploits1References5
NVD
NVD
added 2025/05/04 6:15 a.m.23 views

CVE-2025-4248

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

9.8CVSS0.00402EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/04 6:0 a.m.25 views

CVE-2025-4248 SourceCodester Simple To-Do List System complete_task.php sql injection

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

6.5CVSS0.00402EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/04 6:0 a.m.8 views

CVE-2025-4248 SourceCodester Simple To-Do List System complete_task.php sql injection

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /completetask.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7.3AI score0.00402EPSS
Exploits1References5
CVE
CVE
added 2025/05/04 6:0 a.m.76 views

CVE-2025-4248

CVE-2025-4248 affects SourceCodester Simple To-Do List System 1.0. The vulnerability arises in the file /complete_task.php where manipulating the ID parameter enables SQL injection. Multiple connected sources confirm remote exploitation and public disclosure of the exploit. Impact is described ac...

9.8CVSS7.4AI score0.00402EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/05/04 5:15 a.m.4 views

CVE-2025-4247

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS5.7AI score0.0039EPSS
Exploits1References5
NVD
NVD
added 2025/05/04 5:15 a.m.21 views

CVE-2025-4247

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS0.0039EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/04 4:31 a.m.23 views

CVE-2025-4247 SourceCodester Simple To-Do List System delete_task.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS0.0039EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/04 4:31 a.m.7 views

CVE-2025-4247 SourceCodester Simple To-Do List System delete_task.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /deletetask.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS7.3AI score0.0039EPSS
Exploits1References5
CVE
CVE
added 2025/05/04 4:31 a.m.53 views

CVE-2025-4247

CVE-2025-4247 affects SourceCodester Simple To-Do List System 1.0. The vulnerability exists in an unknown function of the file /delete_task.php, where manipulation of the ID parameter enables SQL injection. Remote exploitation is possible, and public exploits have been disclosed. The CVE entry no...

8.8CVSS7.4AI score0.0039EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/04 2:2 a.m.24 views

CVE-2025-4196

A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /birthing.php. The manipulation of the argument compid leads to sql injection. The attack may be initiated remotely. The exploit...

8.8CVSS7.4AI score0.00389EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/04 12:0 a.m.3 views

PT-2025-18962 · Unknown · Sourcecodester Simple To-Do List System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Simple To-Do List System, affecting an unknown functionality of the file /complete task.php. The manipulation of th...

9.8CVSS7.1AI score0.00402EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/05/04 12:0 a.m.5 views

SourceCodester Simple To-Do List System 安全漏洞

SourceCodester Simple To-Do List System is a SourceCodester open source simple to-do list system. A security vulnerability exists in SourceCodester Simple To-Do List System version 1.0, which is caused by SQL injection due to incorrect manipulation of the parameter ID in the file /completetask.ph...

9.8CVSS6.9AI score0.00402EPSS
Exploits1References5
Rows per page
Query Builder