Lucene search
K

16072 matches found

RedhatCVE
RedhatCVE
added 2025/04/26 1:11 a.m.23 views

CVE-2025-3821

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file add-admin.php. The manipulation of the argument txtpassword/txtfullname/txtemail leads to cross site scripting. Th...

5.4CVSS6.4AI score0.00282EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 1:4 a.m.6 views

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

5.4CVSS6.3AI score0.00293EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 1:1 a.m.17 views

CVE-2025-3764

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. T...

8.8CVSS7.2AI score0.00438EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:43 a.m.8 views

CVE-2025-3823

A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. ...

4.8CVSS6.3AI score0.00324EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:40 a.m.5 views

CVE-2025-3696

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/searchstock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. Th...

8.8CVSS7.6AI score0.00405EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:39 a.m.4 views

CVE-2025-3765

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack may be...

8.8CVSS7AI score0.00438EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:37 a.m.12 views

CVE-2025-3729

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os...

9.8CVSS7.5AI score0.03032EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:37 a.m.9 views

CVE-2025-3783

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

9.8CVSS7AI score0.00757EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:27 a.m.6 views

CVE-2025-3697

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

8.8CVSS7.4AI score0.00405EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:25 a.m.12 views

CVE-2025-3826

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.8CVSS6.2AI score0.00312EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:24 a.m.10 views

CVE-2025-3763

A vulnerability classified as critical has been found in SourceCodester Phone Management System 1.0. This affects the function main of the component Password Handler. The manipulation of the argument s leads to buffer overflow. Local access is required to approach this attack. The exploit has bee...

7.8CVSS7.2AI score0.00288EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 12:19 a.m.16 views

CVE-2025-3822

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...

5.4CVSS6.3AI score0.00356EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.2 views

SourceCodester Student Management System 安全漏洞

SourceCodester Student Management System is SourceCodester open source online student management system. The system provides student information management, announcement management, course management and other functions. SourceCodester Student Management System v1.0 version of a security...

6.1CVSS5.8AI score0.00251EPSS
Exploits1References2
OSV
OSV
added 2025/04/20 1:15 p.m.1 views

CVE-2025-3826

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.1CVSS4AI score0.00312EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/04/20 1:0 p.m.6 views

CVE-2025-3826 SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.8CVSS6.2AI score0.00312EPSS
Exploits1References4
CVE
CVE
added 2025/04/20 1:0 p.m.82 views

CVE-2025-3826

CVE-2025-3826 affects SourceCodester Web-based Pharmacy Product Management System 1.0, specifically the add-supplier.php file. The vulnerability arises from improper handling/manipulation of the arguments txtsupplier_name and txtaddress, enabling cross-site scripting (XSS). Exploitation is remote...

4.8CVSS3.5AI score0.00312EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/04/20 1:0 p.m.33 views

CVE-2025-3826 SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.8CVSS0.00312EPSS
Exploits1References4
OSV
OSV
added 2025/04/20 12:15 p.m.3 views

CVE-2025-3825

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategoryname leads to cross site scriptin...

4.1CVSS4AI score0.00312EPSS
Exploits1References4
NVD
NVD
added 2025/04/20 12:15 p.m.26 views

CVE-2025-3825

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategoryname leads to cross site scriptin...

4.8CVSS0.00312EPSS
Exploits1References4
CVE
CVE
added 2025/04/20 11:31 a.m.69 views

CVE-2025-3825

CVE-2025-3825 affects SourceCodester Web-based Pharmacy Product Management System v1.0, specifically the add-category.php file. The vulnerability arises from manipulation of the txtcategory_name parameter, leading to cross-site scripting. The issue can be triggered remotely and, per connected sou...

4.8CVSS3.4AI score0.00312EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder