Lucene search
+L

20090 matches found

NVD
NVD
•added 2025/05/10 3:15 p.m.•42 views

CVE-2025-4504

A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS0.00555EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/10 2:31 p.m.•18 views

CVE-2025-4504 SourceCodester Online College Library System index.php sql injection

A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS7AI score0.00555EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/10 2:31 p.m.•52 views

CVE-2025-4504 SourceCodester Online College Library System index.php sql injection

A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS0.00555EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/10 2:31 p.m.•89 views

CVE-2025-4504

CVE-2025-4504 affects SourceCodester Online College Library System 1.0. The vulnerability is in the file /index.php where the Category argument is manipulated to trigger a SQL injection. This can be exploited remotely and the exploit has been disclosed publicly. Multiple connected sources corrobo...

9.8CVSS7AI score0.00555EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/10 12:00 a.m.•9 views

CVE-2025-4504: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS7AI score0.00555EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/10 12:00 a.m.•23 views

PT-2025-20630 · Unknown · Sourcecodester Online College Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online College Library System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online College Library System. The issue is related to an unknown function of the file /index.php, where the...

9.8CVSS6.8AI score0.00555EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2025/05/10 12:00 a.m.•28 views

SourceCodester Online College Library System Injection Vulnerability

SourceCodester Online College Library System is SourceCodester open source an online college library system. SourceCodester Online College Library System version 1.0 has an injection vulnerability, the vulnerability stems from the wrong operation of the parameter Category in the file /index.php...

9.8CVSS7.1AI score0.00555EPSS
SaveExploits1References6
NVD
NVD
•added 2025/05/09 5:15 p.m.•27 views

CVE-2025-4481

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely...

9.8CVSS0.00586EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/09 5:15 p.m.•20 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

9.8CVSS5.9AI score0.00418EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/09 5:15 p.m.•38 views

CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

9.8CVSS0.01202EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/09 5:15 p.m.•34 views

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

9.8CVSS0.00418EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/09 5:15 p.m.•56 views

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

9.8CVSS0.00418EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/05/09 5:15 p.m.•23 views

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

9.8CVSS5.9AI score0.00418EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/05/09 5:15 p.m.•23 views

CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

9.8CVSS6.6AI score0.01202EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/09 4:31 p.m.•80 views

CVE-2025-4481

The CVE-2025-4481 entry concerns SourceCodester Apartment Visitor Management System 1.0. A vulnerability exists in the file /search-result.php where the manipulation of the searchdata parameter leads to SQL injection. A remote attacker could exploit this, and multiple sources label the issue as c...

9.8CVSS7AI score0.00586EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/09 4:31 p.m.•16 views

CVE-2025-4481 SourceCodester Apartment Visitor Management System search-result.php sql injection

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely...

7.5CVSS7AI score0.00586EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/09 4:15 p.m.•17 views

CVE-2025-46193

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...

9.8CVSS6.1AI score0.00755EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/09 4:15 p.m.•31 views

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

9.8CVSS0.00671EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/05/09 4:15 p.m.•21 views

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

9.8CVSS5.8AI score0.00671EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/05/09 4:15 p.m.•20 views

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

9.8CVSS5.9AI score0.00521EPSS
SaveExploits1References2
Rows per page
Query Builder