Lucene search
+L

20152 matches found

Vulnrichment
Vulnrichment
•added 2025/03/23 4:31 p.m.•14 views

CVE-2025-2655 SourceCodester AC Repair and Services System Users.php delete_users sql injection

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7.2AI score0.00611EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/03/23 4:31 p.m.•52 views

CVE-2025-2655 SourceCodester AC Repair and Services System Users.php delete_users sql injection

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00611EPSS
SaveExploits1References6
CVE
CVE
•added 2025/03/23 4:31 p.m.•88 views

CVE-2025-2655

SourceCodester AC Repair and Services System 1.0 is affected by CVE-2025-2655. The vulnerability resides in the save_users and delete_users functions in /classes/Users.php, where manipulation of the ID argument yields an SQL injection. The issue allows remote exploitation and, per the public disc...

9.8CVSS7.2AI score0.00611EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2025/03/23 4:15 p.m.•27 views

CVE-2025-2654

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS0.00571EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/23 4:00 p.m.•44 views

CVE-2025-2654 SourceCodester AC Repair and Services System manage_service.php sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS0.00571EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/03/23 4:00 p.m.•16 views

CVE-2025-2654 SourceCodester AC Repair and Services System manage_service.php sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

7.5CVSS7AI score0.00571EPSS
SaveExploits1References5
CVE
CVE
•added 2025/03/23 4:00 p.m.•77 views

CVE-2025-2654

SourceCodester AC Repair and Services System 1.0 contains an SQL injection vulnerability in the admin/services/manage_service.php script, triggered by manipulation of the ID parameter. The issue is exploitable remotely and is considered critical based on the CVE description. The connected sources...

9.8CVSS7AI score0.00571EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/03/23 3:15 p.m.•23 views

CVE-2025-2652

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...

7.5CVSS5.2AI score0.00704EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/23 3:00 p.m.•52 views

CVE-2025-2652 SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listing

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...

6.9CVSS0.00704EPSS
SaveExploits1References5
CVE
CVE
•added 2025/03/23 3:00 p.m.•89 views

CVE-2025-2652

CVE-2025-2652 concerns SourceCodester’s Employee and Visitor Gate Pass Logging System 1.0 , where an unspecified functionality allows information exposure via directory listing. The vulnerability can be exploited remotely; multiple sub-directories are affected, and an exploit has been disclosed p...

7.5CVSS5.2AI score0.00704EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/23 3:00 p.m.•15 views

CVE-2025-2652 SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listing

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...

6.9CVSS5.2AI score0.00704EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/23 2:31 p.m.•53 views

CVE-2025-2651 SourceCodester Online Eyewear Shop admin exposure of information through directory listing

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The explo...

6.9CVSS0.00705EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/03/23 2:31 p.m.•15 views

CVE-2025-2651 SourceCodester Online Eyewear Shop admin exposure of information through directory listing

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The explo...

6.9CVSS5.3AI score0.00705EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•9 views

CVE-2025-2655: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.2AI score0.00611EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•8 views

CVE-2025-2654: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS7AI score0.00571EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•8 views

CVE-2025-2652: Exposure of Information Through Directory Listing

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...

7.5CVSS5.2AI score0.00704EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•9 views

CVE-2025-2651: Exposure of Information Through Directory Listing

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The explo...

6.9CVSS5.3AI score0.00705EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/23 12:00 a.m.•9 views

PT-2025-12540

Name of the Vulnerable Software and Affected Versions SourceCodester AC Repair and Services System version 1.0 Description A critical issue has been found in the system, affecting an unknown part of the file /admin/services/manage service.php. The manipulation of the ID argument leads to SQL...

9.8CVSS6.7AI score0.00571EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2025/03/23 12:00 a.m.•15 views

PT-2025-12538

Name of the Vulnerable Software and Affected Versions SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description A vulnerability has been found in the system, classified as problematic, which leads to exposure of information through directory listing. The attack can be...

7.5CVSS5.5AI score0.00704EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•16 views

SourceCodester AC Repair and Services System Injection Vulnerability

SourceCodester AC Repair and Services System is a SourceCodester open source air conditioning repair and services system. An injection vulnerability exists in SourceCodester AC Repair and Services System version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead...

9.8CVSS7.2AI score0.00611EPSS
SaveExploits1References7
Rows per page
Query Builder