Lucene search
K

8 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/06 9:22 p.m.1 views

CVE-2026-35404

Open edX Platform enables the authoring and delivery of online learning at any scale. The viewsurvey endpoint accepts a redirecturl GET parameter that is passed directly to HttpResponseRedirect without any URL validation. When a non-existent survey name is provided, the server issues an immediate...

6.1CVSS5.8AI score0.00015EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.5 views

Open edX Platform 输入验证错误漏洞

The Open edX Platform is an open-source course management system developed by Open edX. This system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. The Open edX Platform has a vulnerability related to input validation, where the redirecturl...

6.1CVSS5.8AI score0.00015EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/11/13 8:3 p.m.4 views

CVE-2025-13060

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS7.1AI score0.00032EPSS
Exploits1References1
NVD
NVD
added 2025/11/12 8:15 p.m.3 views

CVE-2025-13060

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS0.00032EPSS
Exploits1References5
OSV
OSV
added 2025/11/12 8:15 p.m.2 views

CVE-2025-13060

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/11/12 8:2 p.m.9 views

CVE-2025-13060 SourceCodester Survey Application System view_survey.php sql injection

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

7.5CVSS0.00032EPSS
Exploits1References5
CVE
CVE
added 2025/11/12 8:2 p.m.7 views

CVE-2025-13060

CVE-2025-13060 affects SourceCodester Survey Application System 1.0. The issue is a SQL injection in the function handling the parameter ID in the file /view_survey.php. It can be exploited remotely, and multiple sources note that the exploit has been publicly disclosed. The vulnerability’s sever...

9.8CVSS7.2AI score0.00032EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.2 views

SourceCodester Survey Application System SQL注入漏洞

SourceCodester Survey Application System is a SourceCodester open source survey application system. A SQL injection vulnerability exists in SourceCodester Survey Application System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /viewsurvey.php, which can lead...

9.8CVSS7.9AI score0.00032EPSS
Exploits1References6
Rows per page
Query Builder