Lucene search
+L

4663 matches found

NVD
NVD
added 2025/05/12 3:15 p.m.24 views

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

9.8CVSS0.00413EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/12 3:15 p.m.4 views

DEBIAN-CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

9.8CVSS5.3AI score0.00413EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/12 3:15 p.m.8 views

UBUNTU-CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

9.8CVSS5.8AI score0.00413EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/12 12:00 a.m.76 views

CVE-2025-26846

CVE-2025-26846 affects Znuny versions before 7.1.4. The issue arises from insufficient permission checks when using the Generic Interface to update ticket metadata, enabling improper access under network conditions. The CVSS v3.1 score is 9.8 (CRITICAL) with high impact on confidentiality, integr...

9.8CVSS6.5AI score0.00413EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/05/12 12:00 a.m.10 views

Znuny 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions prior to 7.1.4 that stems from insufficient permission checking when updating ticket metadata using a common interface...

9.8CVSS6.3AI score0.00413EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/12 12:00 a.m.7 views

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

6.8AI score0.00413EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/12 12:00 a.m.31 views

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

0.00413EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/09 10:15 p.m.11 views

CVE-2025-4492

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

9.8CVSS5.8AI score0.00554EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/09 9:31 p.m.68 views

CVE-2025-4492

CVE-2025-4492 concerns Campcodes Online Food Ordering System 1.0, where manipulation of the argument in /routers/ticket-message.php leads to a SQL injection. The vulnerability (remote- exploitable) arises from improper handling of the ticket_id parameter, with multiple connected sources confirmin...

9.8CVSS7.4AI score0.00554EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/09 9:31 p.m.35 views

CVE-2025-4492 Campcodes Online Food Ordering System ticket-message.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

7.5CVSS0.00554EPSS
SaveExploits1References5
NVD
NVD
added 2025/05/09 9:15 p.m.19 views

CVE-2025-4491

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS0.00668EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/09 9:15 p.m.9 views

CVE-2025-4490

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00668EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/09 9:00 p.m.10 views

CVE-2025-4491 Campcodes Online Food Ordering System ticket-status.php sql injection

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

7.5CVSS7.6AI score0.00668EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.8 views

CampCodes Online Food Ordering System 安全漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which is caused by SQL injection due to the operation of the ticketid parameter in the file...

9.8CVSS7.8AI score0.00554EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.12 views

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in CampCodes Online Food Ordering System version 1.0, which originates from SQL injection due to parameter ID manipulation in file /view-ticket-admin.php...

9.8CVSS7.8AI score0.00668EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.8 views

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which originates from an SQL injection caused by the operation of the ticketid parameter in the file...

9.8CVSS7.8AI score0.00668EPSS
SaveExploits1References6
NVD
NVD
added 2025/05/08 4:15 p.m.23 views

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.5CVSS0.00347EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/08 4:15 p.m.4 views

DEBIAN-CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.5CVSS5.3AI score0.00347EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/08 4:15 p.m.17 views

UBUNTU-CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.5CVSS5.8AI score0.00347EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/08 12:00 a.m.8 views

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.4AI score0.00347EPSS
SaveExploits0References1
Rows per page
Query Builder