CVE-2025-0294: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /publichtml/admin/process.php. The manipulation of the argument type/length/business leads to sql injection...

CVE-2025-0173

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/vieworder.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-0173 SourceCodester Online Eyewear Shop view_order.php sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/vieworder.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-0173 SourceCodester Online Eyewear Shop view_order.php sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/vieworder.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-0173

CVE-2025-0173 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is an SQL injection in the /orders/view_order.php script triggered by manipulating the id parameter. The issue can be exploited remotely, and multiple sources note that the exploit has been disclosed to the public. Do...

CVE-2025-0173: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/vieworder.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

SourceCodester Online Eyewear Shop has a vulnerability

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...

CVE-2024-13069

A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2024-13069 SourceCodester Multi Role Login System add-user.php cross site scripting

A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2024-13069 SourceCodester Multi Role Login System add-user.php cross site scripting

A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2024-13069

CVE-2024-13069 affects SourceCodester Multi Role Login System 1.0. A vulnerability resides in the /endpoint/add-user.php endpoint where manipulation of the name parameter enables cross-site scripting. The issue can be exploited remotely; public PoCs/exploits have been disclosed. Connected sources...

CVE-2024-13069: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Th...

PT-2024-17913 · Sourcecodester · Sourcecodester Multi Role Login System

Name of the Vulnerable Software and Affected Versions: SourceCodester Multi Role Login System version 1.0 Description: A vulnerability was found in the SourceCodester Multi Role Login System. It has been classified as problematic. The issue is in an unknown function of the file...

SourceCodester Multi-Role Login System Security Vulnerabilities

SourceCodester Multi Role Login System is a SourceCodester open source multi-role login system. A security vulnerability exists in SourceCodester Multi Role Login System version 1.0, which originates from the parameter name in the file /endpoint/add-user.php that can lead to cross-site scripting...

CVE-2024-13021

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument markname/details leads to cross site scripting. The attack...

CVE-2024-13021 SourceCodester Road Accident Map Marker add-mark.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument markname/details leads to cross site scripting. The attack...

CVE-2024-13021 SourceCodester Road Accident Map Marker add-mark.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument markname/details leads to cross site scripting. The attack...

CVE-2024-13021

CVE-2024-13021 affects SourceCodester Road Accident Map Marker 1.0. The issue is a stored/reflective cross-site scripting vulnerability in the /endpoint/add-mark.php endpoint, triggered by manipulating the mark_name/details parameters. The public exploit is reported, and multiple sources corrobor...

CVE-2024-13021: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Affected by this issue is some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the argument markname/details leads to cross site scripting. The attack...

SourceCodester Road Accident Map Marker: Code Injection Vulnerability

SourceCodester Road Accident Map Marker is a SourceCodester open source road accident map marker project. A code injection vulnerability exists in SourceCodester Road Accident Map Marker version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the markname...