Lucene search
+L

20151 matches found

Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•32 views

PT-2025-17228 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. This issue affects the file /edit-product.php and allo...

8.8CVSS6.1AI score0.00563EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•22 views

PT-2025-17229 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The atta...

8.8CVSS6.2AI score0.00563EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•25 views

PT-2025-17225 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Phone Management System. This issue affects the main function of the Password Handler component. The manipulation of...

7.8CVSS5.7AI score0.00374EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•30 views

SourceCodester Web-based Pharmacy Product Management System Code-related Vulnerabilities

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A code issue vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which stems from insufficient validation o...

8.8CVSS6.7AI score0.00563EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•25 views

SourceCodester Phone Management System security vulnerabilities

SourceCodester Phone Management System is an open source phone management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Management System version 1.0, which is caused by a buffer overflow in the Password Handler component's main function due to mishandling of...

7.8CVSS6.2AI score0.00374EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/04/16 10:09 p.m.•45 views

CVE-2025-3589

A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manageclass.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS7.4AI score0.00561EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 9:15 p.m.•50 views

CVE-2025-3729

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os...

9.8CVSS0.03259EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/04/16 9:15 p.m.•41 views

CVE-2025-3729

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os...

9.8CVSS7.1AI score0.03259EPSS
SaveExploits1References5
NVD
NVD
•added 2025/04/16 9:15 p.m.•28 views

CVE-2025-29709

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...

9.8CVSS0.00623EPSS
SaveExploits1References2
NVD
NVD
•added 2025/04/16 9:15 p.m.•35 views

CVE-2025-29710

SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting XSS via /dashboard/Services...

6.1CVSS0.00304EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/04/16 9:15 p.m.•21 views

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

9.8CVSS5.8AI score0.00623EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/04/16 9:15 p.m.•22 views

CVE-2025-29709

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...

9.8CVSS5.8AI score0.00623EPSS
SaveExploits1References2
NVD
NVD
•added 2025/04/16 9:15 p.m.•48 views

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

9.8CVSS0.00623EPSS
SaveExploits1References2
CVE
CVE
•added 2025/04/16 9:00 p.m.•91 views

CVE-2025-3729

The CVE-2025-3729 entry affects SourceCodester Web-based Pharmacy Product Management System 1.0, specifically the Database Backup Handler’s backup.php. The root cause is improper handling/manipulation of the txtdbname argument, which enables os command injection. Impact is high: remote attack pot...

9.8CVSS7.1AI score0.03259EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/04/16 9:00 p.m.•67 views

CVE-2025-3729 SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injection

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os...

7.5CVSS0.03259EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/16 8:31 p.m.•49 views

CVE-2025-3728 SourceCodester Simple Hotel Booking System login buffer overflow

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...

5.3CVSS0.00335EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/16 8:31 p.m.•86 views

CVE-2025-3728

CVE-2025-3728 affects SourceCodester Simple Hotel Booking System v1.0, where the Login function’s uname parameter can be manipulated to cause a buffer overflow. The local-host attack surface is indicated, with exploitation disclosed publicly. Impact is described as high (confidentiality, integrit...

7.8CVSS5.9AI score0.00335EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/16 8:31 p.m.•18 views

CVE-2025-3728 SourceCodester Simple Hotel Booking System login buffer overflow

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...

5.3CVSS5.9AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
•added 2025/04/16 5:15 p.m.•40 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS0.00506EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•37 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS0.00506EPSS
SaveExploits1References1
Rows per page
Query Builder