Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/18 10:37 p.m.3 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS7.1AI score0.00326EPSS
Exploits1References1
OSV
OSV
added 2025/12/17 10:15 p.m.3 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS5.8AI score0.00326EPSS
Exploits1References5
NVD
NVD
added 2025/12/17 10:15 p.m.5 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS0.00326EPSS
Exploits1References5
CVE
CVE
added 2025/12/17 10:2 p.m.6 views

CVE-2025-14832

The affected software is itsourcecode Online Cake Ordering System v1.0. The vulnerability lies in the file /updateproduct.php?action=edit where manipulation of the ID parameter enables SQL injection, enabling remote exploitation. Multiple connected sources corroborate a publicly available exploit...

9.8CVSS6.8AI score0.00326EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/17 10:2 p.m.17 views

CVE-2025-14832 itsourcecode Online Cake Ordering System updateproduct.php sql injection

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS0.00326EPSS
Exploits1References5
OSV
OSV
added 2024/05/19 2:15 p.m.2 views

CVE-2024-5101

A vulnerability was found in SourceCodester Simple Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file updateproduct.php. The manipulation of the argument ITEM leads to sql injection. The attack can be initiated remotely. The exploit has bee...

8.8CVSS5.8AI score0.00614EPSS
Exploits1References4
Rows per page
Query Builder