CVE-2025-3118

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/viewcourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-29719

SourceCodester rems Employee Management System 1.0 is vulnerable to Cross Site Scripting XSS in addemployee.php via the First Name and Address text fields...

CVE-2025-29719

SourceCodester rems Employee Management System 1.0 is vulnerable to Cross Site Scripting XSS in addemployee.php via the First Name and Address text fields...

CVE-2025-3118 SourceCodester Online Tutor Portal view_course.php sql injection

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/viewcourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3118 SourceCodester Online Tutor Portal view_course.php sql injection

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/viewcourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3118

CVE-2025-3118 affects SourceCodester Online Tutor Portal 1.0. The vulnerability is SQL injection in an unknown part of /tutor/courses/view_course.php triggered by manipulating the ID argument. This issue is exploitable remotely and has been disclosed publicly per multiple connected sources (NVD, ...

CVE-2025-3120: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely...

CVE-2025-3119: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/managecourse.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2025-29719: Improper Neutralization of Input During Web Page Generation

SourceCodester rems Employee Management System 1.0 is vulnerable to Cross Site Scripting XSS in addemployee.php via the First Name and Address text fields...

PT-2025-14558

Name of the Vulnerable Software and Affected Versions SourceCodester Online Tutor Portal version 1.0 Description A critical issue has been identified, affecting the file /tutor/courses/manage course.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited...

PT-2025-14553 · Unknown · Sourcecodester Online Tutor Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tutor Portal version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /tutor/courses/view course.php. The manipulation of the ID argument leads to SQL injection. It is possible to...

PT-2025-14547 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester rems Employee Management System version 1.0 Description: The issue concerns Cross Site Scripting XSS in the add employee.php file, specifically via the First Name and Address text fields. This allows for potential malicious...

PT-2025-14559 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitors Management System version 1.0 Description: A critical issue affects the processing of the file /add-apartment.php, where the manipulation of the apartmentno argument leads to SQL injection. The attack can be...

SourceCodester Online Tutor Portal Injection Vulnerability

SourceCodester Online Tutor Portal is a SourceCodester open source online tutor portal. An injection vulnerability exists in SourceCodester Online Tutor Portal version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead to SQL injection...

SourceCodester Online Tutor Portal Injection Vulnerability

SourceCodester Online Tutor Portal is a SourceCodester open source online tutor portal. An injection vulnerability exists in SourceCodester Online Tutor Portal version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead to SQL injection...

SourceCodester Employee Management System Cross-site Scripting Vulnerabilities

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which originates from a cross-site scripting vulnerability in the First Name an...

CVE-2025-3118: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/viewcourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3045

A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

CVE-2025-3045

The CVE-2025-3045 entry affects oretnom23/SourceCodester Apartment Visitor Management System v1.0. Affected is an unknown function in /remove-apartment.php; manipulating the ID parameter triggers SQL injection. Attacks can be launched remotely, and public disclosures exist. Connected sources corr...

CVE-2025-3045: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack...