SourceCodester Online Student Clearance System SQL Injection Vulnerability

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. SourceCodester Online Student Clearance System version 1.0 suffers from a SQL injection vulnerability, which originates from improper manipulation of the parameters username/password i...

PT-2025-19926

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A critical issue was found in the /Admin/login.php file, affecting unknown code. The manipulation of the username and password arguments leads to SQL injection. The attack...

CVE-2025-4283

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

CVE-2025-4282

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The...

CVE-2025-4282

The CVE-2025-4282 entry affects SourceCodester/oretnom23 Stock Management System 1.0, specifically the /classes/Users.php?f=save handler. Multiple connected sources confirm a cross-site request forgery vulnerability that can be triggered remotely; exploitation is publicly disclosed. The vulnerabi...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

CVE-2025-45751

CVE-2025-45751 affects SourceCodester Web Based Pharmacy Product Management System 1.0. The issue is a Cross Site Scripting (XSS) vulnerability in add-admin.php via the Fullname field, with root cause an unvalidated Fullname input. Potential impact is client-side script execution in the context o...

SourceCodester Stock Management System Injection Vulnerability

SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from improper handling of the parameter ID in the file /admin/?page=purchaseorder/viewpo,...

CVE-2025-4267: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. This affects an unknown part of the file /admin/?page=purchaseorder/viewpo of the component Purchase Order Details Page. The manipulation of the argument ID leads to sql injection...

CVE-2025-4283: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

CVE-2025-45751: Improper Neutralization of Input During Web Page Generation

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

PT-2025-19758 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A vulnerability has been found in the SourceCodester/oretnom23 Stock Management System, classified as problematic. This issue affects unknown code of the file...

SourceCodester Stock Management System Injection Vulnerability

SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which stems from improper handling of the parameter Username in the file /classes/Login.php, which can lead ...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

SourceCodester Web-Based Pharmacy Product Management System has security vulnerabilities.

SourceCodester Web Based Pharmacy Product Management System is an open source web-based pharmaceutical management system from SourceCodester. A security vulnerability exists in SourceCodester Web Based Pharmacy Product Management System version 1.0, which originates from an unvalidated Fullname...

PT-2025-19762 · Unknown · Sourcecodester/Oretnom23 Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester/oretnom23 Stock Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Login.php?f=login, where the manipulation of the Username argument leads to SQL injection. The attack can b...