20091 matches found
PT-2025-17408
Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0 Description A problematic vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. This issue affects an unknown part of the file...
CVE-2025-3817
A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=deletestock. The manipulation of the argument ID leads to sql injection. The attack may be initiated...
CVE-2025-3817 SourceCodester Online Eyewear Shop Master.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=deletestock. The manipulation of the argument ID leads to sql injection. The attack may be initiated...
CVE-2025-3817 SourceCodester Online Eyewear Shop Master.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=deletestock. The manipulation of the argument ID leads to sql injection. The attack may be initiated...
PT-2025-17387
Name of the Vulnerable Software and Affected Versions SourceCodester Online Eyewear Shop version 1.0 Description A critical issue has been found in the processing of the file /oews/classes/Master.php?f=delete stock. The manipulation of the ID argument leads to SQL injection. The attack may be...
CVE-2025-3817: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=deletestock. The manipulation of the argument ID leads to sql injection. The attack may be initiated...
SourceCodester Online Eyewear Shop has a vulnerability
SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...
CVE-2025-3783
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...
CVE-2025-3783
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...
CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...
CVE-2025-3783
SourceCodester Web-based Pharmacy Product Management System 1.0 contains a vulnerability in /add-product.php where the Avatar parameter allows unrestricted file upload. This enables remote exploitation and is publicly disclosed per CVE-2025-3783. Several sources confirm the issue affects an unkno...
CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...
CVE-2025-29708
SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...
CVE-2025-29710
SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting XSS via /dashboard/Services...
CVE-2025-29709
SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...
CVE-2024-40074
Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40072
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index=1...