Lucene search
K

16071 matches found

CVE
CVE
added 2025/03/04 11:0 p.m.56 views

CVE-2025-1961

CVE-2025-1961 affects SourceCodester Best Church Management Software 1.1. The vulnerability lies in the file under /admin/app/web_crud.php where manipulation of the encryption parameter leads to SQL injection. This is exploitable remotely and has been disclosed publicly. Connected sources corrobo...

7.5CVSS7.6AI score0.00241EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/04 6:51 p.m.6 views

CVE-2023-3694

A vulnerability, which was classified as critical, has been found in SourceCodester/projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /index.php. The manipulation of the argument keywords/location leads to sql injection. The attack may be...

9.8CVSS7.3AI score0.00655EPSS
Exploits1References6
CVE
CVE
added 2025/03/04 4:31 a.m.64 views

CVE-2025-1905

The CVE-2025-1905 entry concerns SourceCodester Employee Management System 1.0. Affected component: employee.php, where manipulation of the Full Name parameter enables cross-site scripting. Impact described as remote exploit with other parameters possibly affected; existence of public exploit is ...

6.1CVSS6.4AI score0.00313EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/03/04 4:31 a.m.12 views

CVE-2025-1905 SourceCodester Employee Management System employee.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.1CVSS0.00313EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/03/04 4:31 a.m.9 views

CVE-2025-1905 SourceCodester Employee Management System employee.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.1CVSS3.8AI score0.00313EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.4 views

SourceCodester Best Church Management Software 注入漏洞

SourceCodester Best Church Management Software is an open source church management software from SourceCodester. An injection vulnerability exists in SourceCodester Best Church Management Software version 1.1, which stems from an incorrect operation of the parameter encryption that can lead to SQ...

7.5CVSS7.1AI score0.00241EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.3 views

SourceCodester Employee Management System 安全漏洞

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter Full Name that can...

6.1CVSS4.4AI score0.00313EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/03/04 12:0 a.m.4 views

PT-2025-9718 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical vulnerability has been found in the software, affecting an unknown functionality of the file /admin/app/web crud.php. The manipulation of the encryption argume...

7.5CVSS6.9AI score0.00241EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Best online news portal project, which originates from an SQL injection in the search.php file...

9.8CVSS7.9AI score0.00389EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.3 views

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. SourceCodester Best online news portal project version 1.0 has a SQL injection vulnerability, the vulnerability stems from the admin/add-category.php file has SQL injection...

9.8CVSS8AI score0.00389EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Best online news portal project, which originates from an SQL injection in the admin/contactus.php file...

9.8CVSS7.9AI score0.00389EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Best online news portal project, which originates from a SQL injection in the admin/add-subadmins.php file...

9.8CVSS7.9AI score0.00389EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.4 views

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. SourceCodester Best online news portal project version 1.0 suffers from a SQL injection vulnerability, which originates from a SQL injection in the admin/aboutus.php file...

9.8CVSS7.8AI score0.00389EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.3 views

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Best online news portal project, which originates from a SQL injection in the admin/checkavalability.php file...

9.8CVSS7.9AI score0.00389EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/26 1:29 a.m.11 views

CVE-2025-1607

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS6.7AI score0.00555EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/26 12:24 a.m.15 views

CVE-2025-1598

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/assetcrud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can ...

9.8CVSS6.7AI score0.00611EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/25 11:26 p.m.8 views

CVE-2025-1597

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/redirect.php. The manipulation of the argument a leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS6AI score0.00351EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/25 7:22 p.m.13 views

CVE-2025-1590

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

7.2CVSS6.8AI score0.00367EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/25 6:30 p.m.16 views

CVE-2025-1589

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

6.1CVSS6.2AI score0.00446EPSS
Exploits0References1
NVD
NVD
added 2025/02/24 1:15 a.m.12 views

CVE-2025-1607

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS0.00555EPSS
Exploits1References5
Rows per page
Query Builder