Lucene search
K

6 matches found

OSV
OSV
added 2025/08/03 8:15 a.m.0 views

CVE-2025-8504

A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS5.5AI score0.00405EPSS
Exploits1References5
CVE
CVE
added 2025/08/03 7:32 a.m.14 views

CVE-2025-8504

CVE-2025-8504 affects code-projects Kitchen Treasure 1.0. The vulnerability is in an unknown part of /userregistration.php where manipulating the photo parameter leads to unrestricted file upload, and exploitation can be performed remotely. Multiple sources (NVD/NVD-affiliate feeds, Red Hat, CVE ...

9.8CVSS6.4AI score0.00405EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/03 7:32 a.m.4 views

CVE-2025-8504 code-projects Kitchen Treasure userregistration.php unrestricted upload

A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS7.1AI score0.00405EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/03 12:0 a.m.2 views

Code-Projects Kitchen Treasure 代码问题漏洞

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. A code issue vulnerability exists in Code-Projects Kitchen Treasure version 1.0, which stems from the incorrect manipulation of the parameter photo in the file /userregistration.php resulting in unlimited upload...

9.8CVSS6.6AI score0.00405EPSS
Exploits1References6
CVE
CVE
added 2025/08/01 6:2 a.m.12 views

CVE-2025-8437

CVE-2025-8437 affects code-projects Kitchen Treasure 1.0, with the vulnerability located in an unknown part of /userregistration.php. The issue is an SQL injection via the email parameter that can be triggered remotely, and the exploit has been publicly disclosed. Connected documents corroborate ...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/01 6:2 a.m.4 views

CVE-2025-8437 code-projects Kitchen Treasure userregistration.php sql injection

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

7.5CVSS7.7AI score0.00204EPSS
Exploits1References5
Rows per page
Query Builder