Lucene search
+L

2407 matches found

Positive Technologies
Positive Technologies
added 2025/09/23 12:0 a.m.10 views

PT-2025-39152

Name of the Vulnerable Software and Affected Versions Campcodes Gym Management System version 1.0 Description A security flaw exists in Campcodes Gym Management System version 1.0. The issue involves a SQL injection that can be triggered by manipulating the Username argument in the...

9.8CVSS7.5AI score0.00441EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.6 views

CampCodes Gym Management System SQL注入漏洞

CampCodes Gym Management System is a gym management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /ajax.php, which could lead to a SQL injecti...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.4 views

CampCodes Point of Sale System POS SQL注入漏洞

CampCodes Point of Sale System POS is a point of sale system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Point of Sale System POS version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /login.php, which could lead to a SQL...

9.8CVSS7.7AI score0.00456EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/23 12:0 a.m.15 views

PT-2025-39156

Name of the Vulnerable Software and Affected Versions Campcodes Point of Sale System POS version 1.0 Description A security flaw exists in Campcodes Point of Sale System POS 1.0, related to unknown functionality within the /login.php file. Manipulation of the Username argument can lead to a SQL...

9.8CVSS7.4AI score0.00456EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/09/20 6:18 p.m.12 views

CVE-2025-10687

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/addteacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and coul...

9.8CVSS7AI score0.00441EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/19 2:15 p.m.16 views

CVE-2025-10712

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00302EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/09/19 1:32 p.m.22 views

CVE-2025-10712 07FLYCMS/07FLY-CMS/07FlyCRM login sql injection

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00302EPSS
SaveExploits0References4
OSV
OSV
added 2025/09/18 6:15 p.m.11 views

CVE-2025-10687

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/addteacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and coul...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/18 5:32 p.m.18 views

CVE-2025-10687 SourceCodester Responsive E-Learning System add_teacher.php sql injection

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/addteacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and coul...

7.5CVSS0.00441EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/18 5:32 p.m.26 views

CVE-2025-10687

The CVE-2025-10687 affects SourceCodester Responsive E-Learning System 1.0, specifically the /admin/add_teacher.php file where manipulating the Username parameter triggers a SQL injection. A remote attacker could exploit this after publicly disclosed exploit availability. Multiple connected sourc...

9.8CVSS7.2AI score0.00441EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/18 5:32 p.m.6 views

CVE-2025-10687 SourceCodester Responsive E-Learning System add_teacher.php sql injection

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/addteacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and coul...

7.5CVSS7.2AI score0.00441EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/18 12:0 a.m.8 views

SourceCodester Responsive E-Learning System 安全漏洞

SourceCodester Responsive E-Learning System is a SourceCodester open source e-learning system. A security vulnerability exists in SourceCodester Responsive E-Learning System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /admin/addteacher.php, which...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/09/17 10:45 p.m.5 views

CVE-2025-10482

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be use...

9.8CVSS7.1AI score0.00483EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/17 12:49 p.m.11 views

CVE-2025-10445

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/ustransac.php?action=add. Executing manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has bee...

9.8CVSS7AI score0.00441EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/17 12:49 p.m.17 views

CVE-2025-10444

A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

9.8CVSS7AI score0.00456EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/17 4:47 a.m.12 views

CVE-2025-10426

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/15 10:15 p.m.4 views

CVE-2025-10482

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be use...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/15 10:15 p.m.7 views

CVE-2025-10482

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be use...

9.8CVSS0.00483EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/15 10:2 p.m.21 views

CVE-2025-10482

SourceCodester Online Student File Management System 1.0 is affected by a SQL injection in /admin/index.php where manipulating the Username parameter enables remote exploitation. The vulnerability stems from an input handling issue in an unknown function, leading to potential disclosure/modificat...

9.8CVSS7.3AI score0.00483EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/15 10:2 p.m.3 views

CVE-2025-10482 SourceCodester Online Student File Management System index.php sql injection

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be use...

7.5CVSS6.8AI score0.00483EPSS
SaveExploits1References5
Rows per page
Query Builder