Lucene search
K

16071 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 11:10 p.m.5 views

CVE-2024-0182

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack may be...

9.8CVSS9.7AI score0.00602EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:59 p.m.5 views

CVE-2024-0264

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php. The manipulation of the argument formToken leads to authorization bypass. The attack can be initiated remotely. The...

9.8CVSS7AI score0.18224EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:35 p.m.6 views

CVE-2024-8086

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

9.8CVSS9.7AI score0.00689EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:32 p.m.13 views

CVE-2024-8343

A vulnerability, which was classified as critical, was found in SourceCodester Sentiment Based Movie Rating System 1.0. Affected is an unknown function of the file /classes/Users.php?f=saveclient of the component User Registration Handler. The manipulation of the argument email leads to sql...

9.8CVSS9.8AI score0.00652EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:32 p.m.5 views

CVE-2024-8217

A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS7.6AI score0.00739EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/02/04 12:0 a.m.3 views

Vulnerability of the SourceCodester Phone Contact Manager system, which is related to insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the SourceCodester Phone Contact Manager System is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS5.7AI score0.00298EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/04 12:0 a.m.3 views

Vulnerability of the SourceCodester Phone Contact Manager system, which is related to insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the SourceCodester Phone Contact Manager System is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS5.7AI score0.00305EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2025/02/03 1:15 p.m.14 views

CVE-2024-57522

SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting XSS in Users.php. An attacker can inject a malicious script into the username or name field during user creation...

6.4CVSS0.00945EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.3 views

SourceCodester Packers and Movers Management System 安全漏洞

SourceCodester Packers and Movers Management System is an open source packers and movers management system from Sourcecodester. A security vulnerability exists in version 1.0 of the SourceCodester Packers and Movers Management System, which stems from a cross-site scripting vulnerability in...

6.4CVSS6AI score0.00945EPSS
Exploits1References1
OSV
OSV
added 2025/01/29 2:15 a.m.1 views

CVE-2025-0802

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

8.1CVSS6.6AI score0.00525EPSS
Exploits1References5
OSV
OSV
added 2025/01/29 2:15 a.m.2 views

CVE-2025-0800

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

4.8CVSS3.9AI score0.00393EPSS
Exploits1References4
NVD
NVD
added 2025/01/29 2:15 a.m.29 views

CVE-2025-0802

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

8.1CVSS0.00525EPSS
Exploits1References5
NVD
NVD
added 2025/01/29 2:15 a.m.35 views

CVE-2025-0800

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

5.1CVSS0.00393EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/01/29 2:0 a.m.26 views

CVE-2025-0802 SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...

7.5CVSS0.00525EPSS
Exploits1References5
CVE
CVE
added 2025/01/29 2:0 a.m.52 views

CVE-2025-0802

CVE-2025-0802 affects SourceCodester Best Employee Management System 1.0 (Administrative Endpoint: /admin/View_user.php). The vulnerability causes improper access controls in the View_user.php function, enabling a remote attacker to access restricted functionality without required privileges. Mul...

8.1CVSS7.4AI score0.00525EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/01/29 1:31 a.m.29 views

CVE-2025-0800 SourceCodester Online Courseware Edit Teacher saveeditt.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...

5.1CVSS0.00393EPSS
Exploits1References4
CVE
CVE
added 2025/01/29 1:31 a.m.48 views

CVE-2025-0800

CVE-2025-0800 affects SourceCodester Online Courseware 1.0, specifically the Edit Teacher component (file /pcci/admin/saveeditt.php). The vulnerability arises from manipulation of the fname argument, enabling cross-site scripting. The issue can be triggered remotely, and public exploits exist. Mu...

5.1CVSS3.6AI score0.00393EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.3 views

SourceCodester Best Employee Management System 安全漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A security vulnerability exists in SourceCodester Best Employee Management System version 1.0, which originates in the file /admin/Viewuser.php and can lead to improper access control...

8.1CVSS7.4AI score0.00525EPSS
Exploits1References5
OSV
OSV
added 2025/01/14 5:15 p.m.1 views

CVE-2025-0464

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

4.8CVSS3.8AI score0.00344EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/01/14 5:0 p.m.14 views

CVE-2025-0464 SourceCodester Task Reminder System Maintenance Section cross site scripting

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

5.1CVSS0.00344EPSS
Exploits1References4
Rows per page
Query Builder