Lucene search
+L

20152 matches found

CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•24 views

SourceCodester’s best online news portal project has a SQL injection vulnerability

SourceCodester Best online news portal project is a SourceCodester open source news website. SourceCodester Best online news portal project version 1.0 suffers from a SQL injection vulnerability, which originates from a SQL injection in the admin/aboutus.php file...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•23 views

SourceCodester’s best online news portal project has a SQL injection vulnerability

SourceCodester Best online news portal project is a SourceCodester open source news website. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Best online news portal project, which originates from a SQL injection in the admin/checkavalability.php file...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/26 1:29 a.m.•33 views

CVE-2025-1607

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS5AI score0.00621EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/26 12:24 a.m.•26 views

CVE-2025-1598

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/assetcrud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can ...

9.8CVSS6.2AI score0.00674EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/25 11:26 p.m.•20 views

CVE-2025-1597

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/redirect.php. The manipulation of the argument a leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS3.5AI score0.00409EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/25 7:22 p.m.•40 views

CVE-2025-1590

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

7.2CVSS4.9AI score0.00398EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/25 6:30 p.m.•32 views

CVE-2025-1589

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

6.1CVSS3.2AI score0.00483EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/24 1:15 a.m.•32 views

CVE-2025-1607

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS0.00621EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/02/24 12:31 a.m.•56 views

CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS0.00621EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/02/24 12:31 a.m.•19 views

CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

5.3CVSS5AI score0.00621EPSS
SaveExploits1References5
CVE
CVE
•added 2025/02/24 12:31 a.m.•88 views

CVE-2025-1607

CVE-2025-1607 affects SourceCodester Best Employee Management System 1.0, where manipulating the id parameter in /admin/salary_slip.php leads to an authorization bypass. The vulnerability arises in processing of the salary_slip password/ID input (unknown internal handling) and allows an attacker ...

5.3CVSS5AI score0.00621EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/02/24 12:15 a.m.•17 views

CVE-2025-1598

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/assetcrud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can ...

9.8CVSS6.2AI score0.00674EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/02/24 12:15 a.m.•22 views

CVE-2025-1599

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profilecrud.php. The manipulation of the argument oldcatimg leads to path traversal: '../filedir'. The...

9.1CVSS5.4AI score0.01065EPSS
SaveExploits1References5
NVD
NVD
•added 2025/02/24 12:15 a.m.•40 views

CVE-2025-1598

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/assetcrud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can ...

9.8CVSS0.00674EPSS
SaveExploits1References5
NVD
NVD
•added 2025/02/24 12:15 a.m.•37 views

CVE-2025-1606

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00712EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/02/24 12:00 a.m.•59 views

CVE-2025-1606 SourceCodester Best Employee Management System backups.php information disclosure

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

5.3CVSS0.00712EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/02/24 12:00 a.m.•26 views

CVE-2025-1606 SourceCodester Best Employee Management System backups.php information disclosure

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

5.3CVSS4.9AI score0.00712EPSS
SaveExploits1References5
CVE
CVE
•added 2025/02/24 12:00 a.m.•105 views

CVE-2025-1606

The CVE-2025-1606 entry affects SourceCodester Best Employee Management System 1.0, specifically the file /admin/backup/backups.php, where manipulation leads to information disclosure. Documents consistently state remote exploitation and that the public exploit is disclosed; vendor response is no...

7.5CVSS4.9AI score0.00712EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/02/24 12:00 a.m.•46 views

CVE-2025-1599 SourceCodester Best Church Management Software profile_crud.php path traversal

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profilecrud.php. The manipulation of the argument oldcatimg leads to path traversal: '../filedir'. The...

5.5CVSS0.01065EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/02/24 12:00 a.m.•34 views

CVE-2025-1599 SourceCodester Best Church Management Software profile_crud.php path traversal

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profilecrud.php. The manipulation of the argument oldcatimg leads to path traversal: '../filedir'. The...

5.5CVSS5.4AI score0.01065EPSS
SaveExploits1References5
Rows per page
Query Builder