Lucene search
+L

20062 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/31 12:00 a.m.•10 views

CVE-2025-5369: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS7AI score0.00481EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/30 12:49 p.m.•34 views

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS7.1AI score0.00627EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/30 11:51 a.m.•36 views

CVE-2025-5297

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

6.6CVSS7.1AI score0.0031EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/30 12:53 a.m.•28 views

CVE-2025-45997

Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg...

8.6CVSS7AI score0.00487EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/28 10:47 p.m.•43 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS7.3AI score0.00449EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/28 10:47 p.m.•37 views

CVE-2025-5208

A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack...

9.8CVSS7.3AI score0.00519EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/28 12:15 p.m.•28 views

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS0.00627EPSS
SaveExploits1References5
NVD
NVD
•added 2025/05/28 12:15 p.m.•44 views

CVE-2025-5297

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

6.6CVSS0.0031EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/28 12:00 p.m.•44 views

CVE-2025-5299 SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS0.00627EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/28 12:00 p.m.•38 views

CVE-2025-5299 SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS7.3AI score0.00627EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/28 12:00 p.m.•84 views

CVE-2025-5299

CVE-2025-5299 affects SourceCodester Client Database Management System v1.0. The vulnerability is in the file /user_order_customer_update.php, where manipulating the argument uploaded_file_cancelled enables unrestricted file upload. Exploitation is possible remotely and exploits have been disclos...

7.5CVSS7.3AI score0.00627EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/28 11:31 a.m.•18 views

CVE-2025-5297 SourceCodester Computer Store System main.c Add stack-based overflow

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

5.3CVSS7.1AI score0.0031EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/28 11:31 a.m.•48 views

CVE-2025-5297 SourceCodester Computer Store System main.c Add stack-based overflow

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...

5.3CVSS0.0031EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•21 views

SourceCodester Web-based Pharmacy Product Management System Code-related Vulnerabilities

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in SourceCodester Web-based Pharmacy Product Management System v.1.0, which originates in the file upload functionality and cou...

8.6CVSS6.8AI score0.00487EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/28 12:00 a.m.•9 views

CVE-2025-5299: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS6.9AI score0.00627EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•22 views

SourceCodester Client Database Management System Code-related Vulnerabilities

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A code issue vulnerability exists in SourceCodester Client Database Management System version 1.0, which stems from improper handling of the uploadedfilecancelled parameter in the...

7.5CVSS7.6AI score0.00627EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•22 views

PT-2025-23087 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Web-based Pharmacy Product Management System version 1.0 Sourcecodester Web-based Pharmacy Product Management System version 0.0.1 Description: The issue allows an attacker to upload a PHP file disguised as an image by modifyin...

8.6CVSS6.5AI score0.00487EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•23 views

PT-2025-23078 · Sourcecodester · Sourcecodester Computer Store System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Store System version 1.0 Description: A critical issue has been found in the SourceCodester Computer Store System. This issue affects the function Add of the file main.c. The manipulation of the argument...

6.6CVSS5.2AI score0.0031EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•27 views

PT-2025-23081 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. The issue affects the file /user order customer update.php, where the...

7.5CVSS7.2AI score0.00627EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/05/28 12:00 a.m.•24 views

SourceCodester Computer Store System security vulnerabilities

SourceCodester Computer Store System is an open source computer storage system from SourceCodester. A security vulnerability exists in SourceCodester Computer Store System version 1.0, which stems from improper handling of the laptopcompany/RAM/Processor parameter in the Add function in the main....

6.6CVSS5.8AI score0.0031EPSS
SaveExploits1References6
Rows per page
Query Builder