Lucene search
K

16072 matches found

CVE
CVE
added 2025/04/06 8:31 a.m.59 views

CVE-2025-3314

CVE-2025-3314 affects SourceCodester Apartment Visitor Management System 1.0. The vulnerability lies in the /forgotpw.php handler, where the query parameter “secode” is improperly processed, leading to SQL injection. This enables remote attackers to influence the database without authentication. ...

9.8CVSS7.5AI score0.00432EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/06 12:0 a.m.2 views

PT-2025-15096 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /forgotpw.php. The manipulation of the secode argument leads to SQL injection. Th...

9.8CVSS7.7AI score0.00432EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/04/06 12:0 a.m.3 views

PT-2025-15097 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Apartment Visitor Management System, affecting some unknown functionality of the file /view-report.php. The...

9.8CVSS7.6AI score0.00432EPSS
Exploits1References15
OSV
OSV
added 2025/04/05 11:15 a.m.1 views

CVE-2025-3298

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...

5.3CVSS4.9AI score0.00338EPSS
Exploits1References5
NVD
NVD
added 2025/04/05 11:15 a.m.14 views

CVE-2025-3298

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...

5.3CVSS0.00338EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/04/05 10:31 a.m.6 views

CVE-2025-3298 SourceCodester Online Eyewear Shop Registration Master.php access control

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...

5.3CVSS7AI score0.00338EPSS
Exploits1References5
CVE
CVE
added 2025/04/05 10:31 a.m.50 views

CVE-2025-3298

CVE-2025-3298 affects SourceCodester Online Eyewear Shop 1.0. The issue resides in the Registration Handler’s file /oews/classes/Master.php?f=save_product, where manipulating the email argument leads to improper access controls. The vulnerability is remotely exploitable and exploitation has been ...

5.3CVSS4.9AI score0.00338EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/04/05 9:15 a.m.2 views

CVE-2025-3297

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...

5.1CVSS3.8AI score0.00338EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/04/05 8:33 a.m.19 views

CVE-2025-3151

A vulnerability was found in SourceCodester Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit ha...

9.8CVSS7.4AI score0.00438EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/04/05 8:31 a.m.16 views

CVE-2025-3297 SourceCodester Online Eyewear Shop Master.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...

5.1CVSS0.00338EPSS
Exploits1References5
OSV
OSV
added 2025/04/05 8:15 a.m.1 views

CVE-2025-3296

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=deletecustomer. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

5.3CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/04/05 8:15 a.m.13 views

CVE-2025-3296

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=deletecustomer. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

6.5CVSS0.00319EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/04/05 8:0 a.m.21 views

CVE-2025-3296 SourceCodester Online Eyewear Shop Users.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=deletecustomer. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

6.5CVSS0.00319EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/04/05 8:0 a.m.5 views

CVE-2025-3296 SourceCodester Online Eyewear Shop Users.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=deletecustomer. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

6.5CVSS7.4AI score0.00319EPSS
Exploits1References5
CVE
CVE
added 2025/04/05 8:0 a.m.59 views

CVE-2025-3296

CVE-2025-3296 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is an SQL injection caused by improper handling of the ID parameter in /classes/Users.php?f=delete_customer, allowing remote exploitation. Descriptions across multiple sources confirm a critical issue with variant CVS...

6.5CVSS6.8AI score0.00319EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/05 6:39 a.m.20 views

CVE-2025-3143

A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. T...

8.8CVSS7.5AI score0.00407EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/05 5:23 a.m.20 views

CVE-2025-3141

A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managecategory.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS7.5AI score0.00424EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/05 4:46 a.m.20 views

CVE-2025-3140

A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /viewcategory.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS7.7AI score0.00424EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/05 12:0 a.m.2 views

SourceCodester Online Eyewear Shop 安全漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL that provides an online shopping and ordering platform for the eyewear business and its potential customers. A security vulnerability exists in SourceCodester Onli...

5.3CVSS4.9AI score0.00338EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/04/05 12:0 a.m.1 views

SourceCodester Online Eyewear Shop 注入漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...

6.5CVSS7.1AI score0.00319EPSS
Exploits1References6
Rows per page
Query Builder