Lucene search
+L

20152 matches found

osv_cve
osv_cve
•added 2025/02/11 2:15 a.m.•27 views

CVE-2025-1166

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

8.8CVSS6.1AI score0.00528EPSS
SaveExploits1References5
NVD
NVD
•added 2025/02/11 2:15 a.m.•25 views

CVE-2025-1166

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

8.8CVSS0.00528EPSS
SaveExploits1References5
NVD
NVD
•added 2025/02/11 2:15 a.m.•24 views

CVE-2025-1168

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

9.8CVSS0.00542EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2025/02/11 2:00 a.m.•11 views

CVE-2025-1168 SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

6.5CVSS6.4AI score0.00542EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2025/02/11 2:00 a.m.•37 views

CVE-2025-1168 SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

6.5CVSS0.00542EPSS
SaveExploits2References4
CVE
CVE
•added 2025/02/11 2:00 a.m.•86 views

CVE-2025-1168

CVE-2025-1168 affects SourceCodester Contact Manager with Export to VCF 1.0. The vulnerability resides in /endpoint/delete-contact.php where manipulating the contact argument leads to SQL injection. Impact is described as remote, with high confidentiality/integrity/availability implications in mu...

9.8CVSS6.4AI score0.00542EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/11 1:00 a.m.•26 views

CVE-2025-1166 SourceCodester Food Menu Manager update.php unrestricted upload

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

6.5CVSS6.1AI score0.00528EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/02/11 1:00 a.m.•39 views

CVE-2025-1166 SourceCodester Food Menu Manager update.php unrestricted upload

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

6.5CVSS0.00528EPSS
SaveExploits1References5
CVE
CVE
•added 2025/02/11 1:00 a.m.•88 views

CVE-2025-1166

CVE-2025-1166 applies to SourceCodester Food Menu Manager 1.0. The vulnerability is in the file endpoint/update.php, enabling unrestricted file uploads and allowing remote exploitation. Impact is described as critical in multiple sources, with potential for arbitrary uploaded content and impact o...

8.8CVSS6.1AI score0.00528EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•11 views

CVE-2025-1168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

9.8CVSS6.4AI score0.00542EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•8 views

PT-2025-6142

Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager with Export to VCF version 1.0 Description: A critical issue has been found in the SourceCodester Contact Manager with Export to VCF. The problem affects the /endpoint/delete-contact.php file, where the...

9.8CVSS6.2AI score0.00542EPSS
SaveExploits2References11
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•20 views

SourceCodester Contact Manager SQL Injection Vulnerability

SourceCodester Contact Manager is an open source contact management system from Sourcecodester. A SQL injection vulnerability exists in SourceCodester Contact Manager version 1.0, which stems from an incorrect manipulation of the contact parameter that can lead to SQL injection...

9.8CVSS6.5AI score0.00542EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•25 views

PT-2025-6137 · Sourcecodester · Sourcecodester Food Menu Manager

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Menu Manager version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file "endpoint/update.php". This leads to unrestricted upload. The issue can be exploited...

8.8CVSS6.3AI score0.00528EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•10 views

CVE-2025-1166: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

8.8CVSS6.1AI score0.00528EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•9 views

CVE-2025-1169: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated...

6.1CVSS3.8AI score0.0039EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•25 views

SourceCodester Food Menu Manager code-related vulnerabilities

SourceCodester Food Menu Manager is a Sourcecodester open source food menu manager. A code issue vulnerability exists in SourceCodester Food Menu Manager version 1.0, which stems from...

8.8CVSS6.6AI score0.00528EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/02/10 11:15 p.m.•28 views

CVE-2025-1160

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

9.8CVSS6.9AI score0.00934EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/02/10 10:31 p.m.•40 views

CVE-2025-1160 SourceCodester Employee Management System index.php default credentials

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

7.5CVSS0.00934EPSS
SaveExploits1References5
CVE
CVE
•added 2025/02/10 10:31 p.m.•81 views

CVE-2025-1160

CVE-2025-1160 affects SourceCodester Employee Management System 1.0. The issue resides in index.php where manipulation of the username/password parameters leads to the use of default credentials. The vulnerability can be exploited remotely and is rated critical by NVD (various sources align on hi...

9.8CVSS6.9AI score0.00934EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/10 12:00 a.m.•5 views

CVE-2025-1160: Use of Default Credentials

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

9.8CVSS6.9AI score0.00934EPSS
SaveExploits1References1
Rows per page
Query Builder