CVE-2025-4787

A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/viewsale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4787 SourceCodester/oretnom23 Stock Management System view_sale sql injection

A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/viewsale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4787 SourceCodester/oretnom23 Stock Management System view_sale sql injection

A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/viewsale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4786

CVE-2025-4786 affects SourceCodester/oretnom23 Stock Management System 1.0. The issue is an SQL injection in the endpoint /admin/?page=return/view_return triggered by manipulating the ID parameter, with remote exploitation possible. Public disclosure exists and the vulnerability is classified as ...

CVE-2025-4782

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/viewreceiving&id=1. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2025-4782

CVE-2025-4782 affects SourceCodester/oretnom23 Stock Management System 1.0. The vulnerability is an SQL injection in the endpoint /sms/admin/?page=receiving/view_receiving&id=1 where manipulating the id parameter can lead to remote exploitation. Multiple sources note that the exploit has been dis...

CVE-2025-4782 SourceCodester/oretnom23 Stock Management System view_receiving sql injection

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/viewreceiving&id=1. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2025-4782 SourceCodester/oretnom23 Stock Management System view_receiving sql injection

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/viewreceiving&id=1. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2025-44186

SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/Operation/User.php page...

CVE-2025-44184

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the websiteimage, fname, lname, contact, username, and address parameters...

SourceCodester Online Student Clearance System 安全漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A security vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from a directory listing that leads to information disclosure...

PT-2025-21738 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester/oretnom23 Stock Management System. The issue affects an unknown function of the file /admin/?page=sales/vi...

SourceCodester Stock Management System 安全漏洞

SourceCodester Stock Management System is an open source inventory management system from SourceCodester. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file...

SourceCodester Stock Management System 安全漏洞

SourceCodester Stock Management System is an open source inventory management system from SourceCodester. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

PT-2025-21664 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue has been discovered, affecting the file "/sms/admin/?page=receiving/view receiving&id=1". The manipulation of the id argument leads to SQL injection...

SourceCodester Stock Management System 注入漏洞

SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter ID in the file...

CVE-2025-4728

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-4728 SourceCodester Best Online News Portal search.php sql injection

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-4728

The CVE applies to SourceCodester Best Online News Portal 1.0, where an SQL injection is possible via the searchtitle parameter in /search.php. The root cause is a manipulation of the searchtitle input, enabling remote exploitation without authentication. Exploitation has been disclosed publicly....

CVE-2025-4728 SourceCodester Best Online News Portal search.php sql injection

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...