CVE-2025-3697

The CVE-2025-3697 entry maps to a SQL injection in SourceCodester Web-based Pharmacy Product Management System 1.0, caused by improper handling of the ID parameter in /edit-product.php. A remote attacker could exploit this vulnerability, and public disclosures exist. The provided connected docume...

CVE-2025-3697 SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

CVE-2025-3696

The CVE-2025-3696 entry covers SourceCodester Web-based Pharmacy Product Management System 1.0. A SQL injection affects the /search/search_stock.php file via manipulation of the Name parameter. This can be exploited remotely, and multiple sources confirm the vulnerability exists in the unknown co...

CVE-2025-3696 SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/searchstock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. Th...

CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-3694

CVE-2025-3694 affects SourceCodester Web-based Pharmacy Product Management System 1.0, specifically the Login Handler component. The root cause isSQL injection triggered by manipulating the login_email parameter in the login flow, allowing remote exploitation. Public exploit details are reference...

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

CVE-2025-3692

CVE-2025-3692 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability lies in an unknown functionality exercised by the file /oews/classes/Master.php?f=save_product, enabling cross-site scripting. The attack is possible remotely and the exploit has been disclosed publicly. Connected sou...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

PT-2025-16898 · Unknown · Sourcecodester Simple Hotel Booking System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Hotel Booking System version 1.0 Description: A critical vulnerability was found in the Login function, where the manipulation of the uname argument leads to a buffer overflow. This issue can be exploited on the local...

PT-2025-16893 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue is related to Cross Site Scripting XSS via the /dashboard/Services API endpoint. This allows for potential malicious script injection. No information is provided about the...

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to misuse of the parameter shortnam...

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from the portfolio feature not properly validating uploaded files, which could result in arbitrary fil...

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

PT-2025-16782 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /edit-product.php. The manipulation of the ID argument leads to SQL...

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...