Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-29123

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00058EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/09/16 2:25 p.m.2 views

CVE-2025-10400

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS7.1AI score0.00058EPSS
Exploits1References1
OSV
OSV
added 2025/09/14 2:15 p.m.0 views

CVE-2025-10400

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS6.5AI score
Exploits0References5
NVD
NVD
added 2025/09/14 2:15 p.m.2 views

CVE-2025-10400

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS0.00058EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/09/14 2:2 p.m.9 views

CVE-2025-10400 SourceCodester Food Ordering Management System ticket-message.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00058EPSS
Exploits1References5
CVE
CVE
added 2025/09/14 2:2 p.m.11 views

CVE-2025-10400

CVE-2025-10400 affects SourceCodester Food Ordering Management System 1.0. The vulnerability is in the /routers/ticket-message.php function handling the ticket_id argument, where improper manipulation leads to SQL injection. Exploitation is possible remotely over a network, and publicly disclosed...

8.8CVSS6.5AI score0.00058EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/14 2:2 p.m.4 views

CVE-2025-10400 SourceCodester Food Ordering Management System ticket-message.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS6.4AI score0.00058EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/14 12:0 a.m.3 views

PT-2025-37414

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A security issue exists in SourceCodester Food Ordering Management System 1.0. The vulnerability is due to SQL injection in an unknown function of the file...

8.8CVSS6.5AI score0.00058EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/09/14 12:0 a.m.3 views

SourceCodester Food Ordering Management System SQL注入漏洞

SourceCodester Food Ordering Management System is a SourceCodester open source food ordering management system. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which originates from an incorrect manipulation of the ticketid parameter in the file...

8.8CVSS6.8AI score0.00058EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/05/23 2:51 a.m.2 views

CVE-2023-0325

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

6.1CVSS6AI score0.00785EPSS
Exploits1References1
OSV
OSV
added 2025/05/09 10:15 p.m.0 views

CVE-2025-4492

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

9.8CVSS5.8AI score0.00204EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.1 views

CampCodes Online Food Ordering System 安全漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which is caused by SQL injection due to the operation of the ticketid parameter in the file...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References2
OSV
OSV
added 2023/11/02 2:15 p.m.1 views

CVE-2023-45343

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00085EPSS
Exploits1References2
NVD
NVD
added 2023/11/02 2:15 p.m.6 views

CVE-2023-45343

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00085EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.2 views

PT-2023-29519 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the ticket id parameter of the "routers/ticket-message.php"...

9.8CVSS9.7AI score0.00085EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.1 views

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the ticketid parameter on the routers/ticket-message.php page, resulting in a SQL...

9.8CVSS8AI score0.00085EPSS
Exploits1References4
Prion
Prion
added 2023/04/04 10:15 p.m.8 views

Cross site scripting

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

5.8CVSS5.9AI score0.00785EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/03/08 10:15 p.m.0 views

CVE-2021-33351

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field...

9CVSS5.8AI score0.00389EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/03/08 12:0 a.m.1 views

Wyomind Magento 跨站脚本漏洞

Wyomind Magento is a ticketing system from Wyomind. A security vulnerability exists in Wyomind Help Desk Magento 2 extension version v.1.3.6 and prior versions. An attacker can exploit the vulnerability to elevate privileges via a specially crafted payload in the ticket message field...

9CVSS8.3AI score0.00389EPSS
Exploits1References3
Rows per page
Query Builder