CVE-2025-3694 SourceCodester Web-based Pharmacy Product Management System Login sql injection

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument loginemail leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

CVE-2025-3692

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct. The manipulation leads to cross site scripting. The attack can be launched...

CVE-2025-3692

CVE-2025-3692 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability lies in an unknown functionality exercised by the file /oews/classes/Master.php?f=save_product, enabling cross-site scripting. The attack is possible remotely and the exploit has been disclosed publicly. Connected sou...

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

CVE-2024-40069

The Sourcecodester Online ID Generator System version 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input via the POST parameters firstname and lastname at the id_generator/classes/Users.php?f=save endpoint. Attackers can exploit ...

CVE-2024-40068

The Sourcecodester Online ID Generator System 1.0 is vulnerable to a SQL injection vulnerability. The flaw exists due to the incorrect manipulation of the id parameter at the id_generator/admin/?page=templates/manage_template&id=1 endpoint. This vulnerability allows for unauthorized database inte...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 contains an arbitrary file upload vulnerability within the id_generator/classes/Users.php?f=save endpoint. An attacker can exploit this flaw by uploading a crafted PHP file to achieve arbitrary code execution . To mitigate this risk, it is recommended...

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

CVE-2024-40074

The Sourcecodester Online ID Generator System 1.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the id_generator/classes/SystemSettings.php?f=update_settings endpoint, specifically due to improper neutralization of the short_name POST parameter. An attacker could potenti...

CVE-2024-40073

The Sourcecodester Online ID Generator System 1.0 is vulnerable to a SQL injection vulnerability due to the incorrect manipulation of the template parameter. The flaw can be exploited via the endpoint id_generator/admin/?page=generate&template=4. This vulnerability allows for unauthorized databas...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

CVE-2025-29709

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...

CVE-2025-29709

SourceCodester Company Website CMS version 1.0 contains a File upload vulnerability within the "Create portfolio" feature at the /dashboard/portfolio endpoint. The root cause is the improper validation of uploaded files , which allows for unauthorized file uploads. This flaw could lead to signifi...

CVE-2025-29708

SourceCodester Company Website CMS version 1.0 is vulnerable to a file upload vulnerability within the "Create Services" component. The root cause is an improper validation of uploaded files via the /dashboard/Services API endpoint, which could allow for arbitrary file uploads . While no specific...

CVE-2025-29710

SourceCodester Company Website CMS version 1.0 is vulnerable to Cross Site Scripting (XSS) due to a security flaw in the files/dashboard/Services component. This vulnerability allows for the injection of malicious scripts via the /dashboard/Services API endpoint. While there is no information reg...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...