CVE-2025-1593

CVE-2025-1593 affects SourceCodester Best Employee Management System 1.0, specifically the Profile Picture Handler. The vulnerability resides in unrestricted file upload to the path /_hr_soft/assets/uploadImage/Profile/, allowing remote attackers to upload arbitrary files. The description consist...

CVE-2025-1592 SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

CVE-2025-1592 SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

CVE-2025-1592

Summary: CVE-2025-1592 affects SourceCodester Best Employee Management System 1.0, specifically the Add Role Page’s /admin/Operations/Role.php. The issue arises from manipulating the assign_name/description parameters, causing cross-site scripting that can be triggered remotely. The primary sourc...

CVE-2025-1590

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

CVE-2025-1590

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1591

CVE-2025-1591 affects SourceCodester Employee Management System 1.0, specifically the Department Page component. The vulnerability resides in /department.php where manipulating the Department Name parameter leads to cross-site scripting. The attack is described as remote. Connected sources corrob...

CVE-2025-1590 SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

CVE-2025-1590 SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

CVE-2025-1590

CVE-2025-1590 affects SourceCodester E-Learning System 1.0. The vulnerability is in an unknown function of the file /admin/modules/lesson/index.php within the List of Lessons Page, and the manipulation allows an unrestricted file upload. The issue can be leveraged remotely. Multiple connected sou...

CVE-2025-1589

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1589

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1589

CVE-2025-1589 affects SourceCodester E-Learning System 1.0, specifically the User Registration Handler’s /register.php. Multiple connected sources describe a cross-site scripting vulnerability that can be triggered remotely through the registration path. The exact affected code path is the handli...

CVE-2025-1589 SourceCodester E-Learning System User Registration register.php cross site scripting

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1587

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

CVE-2025-1587 SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

CVE-2025-1587

CVE-2025-1587 affects SourceCodester Telecom Billing Management System 1.0, specifically the function addrecords in the Add New Record component (main.cpp). The vulnerability is a buffer overflow caused by manipulation of the argument name/phonenumber, with local access required to exploit. Explo...

PT-2025-7658 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.0 Description: A critical issue affects some unknown processing of the file /fpassword.php. The manipulation of the argument email leads to SQL injection. The attack may be initiated...