Lucene search
+L

7137 matches found

CNNVD
CNNVD
added 2025/09/19 12:00 a.m.10 views

Four-Faith Water Conservancy Informatization 安全漏洞

Four-Faith Water Conservancy Informatization is a water conservancy informatization system from China Four-Faith Four-Faith. A security vulnerability exists in Four-Faith Water Conservancy Informatization version 1.0, which stems from an incorrect manipulation of the parameter fileName in the fil...

7.5CVSS5.8AI score0.00971EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.18 views

PT-2025-38472

Name of the Vulnerable Software and Affected Versions SourceCodester Responsive E-Learning System version 1.0 Description A SQL injection issue exists in SourceCodester Responsive E-Learning System 1.0. The Username parameter in the /admin/add teacher.php file is susceptible to manipulation,...

9.8CVSS7.7AI score0.00478EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/09/18 12:00 a.m.12 views

Weitong Mall 授权问题漏洞

Weitong Mall Weitong Mall is a shopping mall system by fuyanglipengjun, an individual developer. An authorization issue vulnerability exists in Weitong Mall version 1.0, which originates from improper authorization of the BrandController function in the file /brand/queryAll, and could lead to a...

5.3CVSS4.9AI score0.00352EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/18 12:00 a.m.10 views

itsourcecode Online Discussion Forum SQL注入漏洞

itsourcecode Online Discussion Forum is an online forum of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which stems from incorrect manipulation of the parameter ID in the file /members/composemsgadmin.php, which could lead to ...

9.8CVSS7.7AI score0.00435EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/18 12:00 a.m.11 views

itsourcecode Online Petshop Management System 安全漏洞

itsourcecode Online Petshop Management System is itsourcecode open source an online pet store management system. A security vulnerability exists in version 1.0 of itsourcecode Online Petshop Management System, which stems from an incorrect manipulation of the name or address parameter in the file...

5.4CVSS4.3AI score0.00278EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.31 views

PT-2025-38467

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A security flaw exists in the AttributeController function within the /attribute/queryAll file of the fuyang lipengjun platform. Manipulation of this function leads to improper authorization...

5.3CVSS4.5AI score0.00352EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.15 views

PT-2025-38322

Name of the Vulnerable Software and Affected Versions itsourcecode Online Discussion Forum version 1.0 Description A SQL injection weakness exists in the file /members/compose msg.php due to the manipulation of the ID argument. This issue is exploitable remotely. The exploit has been made publicl...

9.8CVSS7.4AI score0.00525EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.13 views

PT-2025-38411

Name of the Vulnerable Software and Affected Versions itsourcecode Student Information Management System version 1.0 Description A vulnerability exists in itsourcecode Student Information Management System version 1.0. The issue is a SQL injection affecting an unknown function within the...

9.8CVSS7.4AI score0.00589EPSS
SaveExploits1References7
GithubExploit
GithubExploit
added 2025/09/17 1:22 p.m.171 views

Pet-grooming-management-quotation.php-v.1.0-sql-injection

Pet-grooming-manageme...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.16 views

SourceCodester Hotel Reservation System SQL注入漏洞

SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file deleteuser.php, which could lead t...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.10 views

itsourcecode E-Commerce Website 代码问题漏洞

itsourcecode E-Commerce Website is an e-commerce website by itsourcecode open source. A code issue vulnerability exists in version 1.0 of itsourcecode E-Commerce Website, which stems from an incorrect operation of the file /admin/products.php, which could lead to remote arbitrary file uploads...

8.8CVSS6.7AI score0.00356EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/17 12:00 a.m.22 views

PT-2025-38275

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0 Description: A security flaw has been discovered that allows for unrestricted upload. The issue affects an unknown function within the /admin/users.php file and can be exploited remotely. The exploi...

6.5CVSS6.2AI score0.00459EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.12 views

SourceCodester Online Student File Management 安全漏洞

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A security vulnerability exists in SourceCodester Online Student File Management version 1.0, which originates from an incorrect manipulation of the parameter studentid in the file...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.12 views

SourceCodester Online Exam Form Submission SQL注入漏洞

SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A SQL injection vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/deletes1.php,...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.10 views

SourceCodester Online Student File Management 安全漏洞

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A security vulnerability exists in SourceCodester Online Student File Management version 1.0, which stems from an incorrect manipulation of the parameter userid in the file...

8.8CVSS6.9AI score0.00443EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/17 12:00 a.m.24 views

PT-2025-38220

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists due to the manipulation of the usn argument in the file /index.php. The attack can be launched remotely. The exploit has been made public...

7.5CVSS7.3AI score0.00548EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.11 views

SourceCodester Online Polling System SQL注入漏洞

SourceCodester Online Polling System is a SourceCodester open source online polling system. A SQL injection vulnerability exists in SourceCodester Online Polling System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/positions.php, which could lead to a...

8.8CVSS7AI score0.00396EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.13 views

itsourcecode E-Commerce Website 代码问题漏洞

itsourcecode E-Commerce Website is an open source e-commerce website by itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode E-Commerce Website, which originates from an unlimited upload function in file /admin/users.php, which could lead to a remote attack...

8.8CVSS6.7AI score0.00459EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.11 views

itsourcecode Student Information System 安全漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Information System, which stems from an incorrect manipulation of the parameter levelid in the file /leveledit1.php, which...

8.8CVSS6.7AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/16 8:15 p.m.10 views

CVE-2025-56263

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

8.8CVSS0.00401EPSS
SaveExploits1References2
Rows per page
Query Builder