Lucene search
+L

20062 matches found

osv_cve
osv_cve
•added 2025/06/24 10:15 p.m.•24 views

CVE-2025-6580

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00547EPSS
SaveExploits1References5
NVD
NVD
•added 2025/06/24 10:15 p.m.•23 views

CVE-2025-6580

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS0.00547EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/24 9:31 p.m.•49 views

CVE-2025-6580

The vulnerability CVE-2025-6580 affects SourceCodester Best Salon Management System 1.0, specifically the Login component where manipulation of the Username parameter enables SQL injection. Impact is practical remote exploitation with potential confidentiality, integrity, and availability implica...

9.8CVSS7.7AI score0.00547EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/06/24 9:31 p.m.•36 views

CVE-2025-6580 SourceCodester Best Salon Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00547EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/24 9:31 p.m.•13 views

CVE-2025-6580 SourceCodester Best Salon Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7.7AI score0.00547EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/06/24 12:50 p.m.•28 views

CVE-2025-6476

A vulnerability was found in SourceCodester Gym Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

5.3CVSS7.1AI score0.00257EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•21 views

SourceCodester’s Best Salon Management System has a vulnerability regarding injection attacks

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. An injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from mishandling of the parameter Username in the login component, which can lead to...

9.8CVSS7.9AI score0.00547EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•22 views

SourceCodester’s Best Salon Management System has security vulnerabilities

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from improper handling of the viewid parameter in the view-appointment.php file, which...

8.8CVSS7AI score0.00451EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•19 views

SourceCodester’s Best Salon Management System has security vulnerabilities

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from improper handling of the editid parameter in the edit-customer-detailed.php file,...

8.8CVSS7AI score0.00451EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•8 views

CVE-2025-6580: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00547EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•10 views

CVE-2025-6581: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•17 views

PT-2025-26792 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Best Salon Management System. The issue affects some unknown functionality of the file...

8.8CVSS6.8AI score0.00451EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•24 views

PT-2025-26790 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the Login component. The manipulation of the Username argument leads to SQL injection. This issue can ...

9.8CVSS7.4AI score0.00547EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•16 views

PT-2025-26791 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Salon Management System version 1.0 Description: A critical issue was found in the SourceCodester Best Salon Management System, affecting an unknown functionality of the file /add-customer.php. The manipulation of the...

8.8CVSS6.8AI score0.00452EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
•added 2025/06/23 8:39 a.m.•18 views

CVE-2025-6355

A vulnerability has been found in SourceCodester Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execeditroom.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7.9AI score0.00514EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/06/22 1:15 p.m.•15 views

CVE-2025-6477

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name...

4.8CVSS3.8AI score0.00342EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/06/22 1:15 p.m.•16 views

CVE-2025-6476

A vulnerability was found in SourceCodester Gym Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

5.3CVSS4.7AI score0.00257EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/22 1:00 p.m.•60 views

CVE-2025-6477

SourceCodester Student Result Management System 1.0 contains an XSS vulnerability in the System Settings Page (file path: /script/admin/system) triggered by manipulating the School Name parameter. The issue is exploitable remotely, with public exploit disclosure cited. Affected functionality is u...

4.8CVSS3.5AI score0.00342EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/22 1:00 p.m.•17 views

CVE-2025-6477 SourceCodester Student Result Management System System Settings Page system cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name...

4.8CVSS3.4AI score0.00342EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/22 12:31 p.m.•32 views

CVE-2025-6476 SourceCodester Gym Management System cross-site request forgery

A vulnerability was found in SourceCodester Gym Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

5.3CVSS0.00257EPSS
SaveExploits1References5
Rows per page
Query Builder