Lucene search
+L

9663 matches found

CNNVD
CNNVD
•added 2025/04/22 12:00 a.m.•19 views

Tecnick TCExam SQL注入漏洞

Tecnick TCExam is a web-based open source e-exam system from Tecnick UK. The system is mainly used for online exams and so on. A SQL injection vulnerability exists in Tecnick TCExam version 16.3.2, which stems from improper neutralization of special elements in SQL commands, and could lead to SQL...

8.8CVSS7.7AI score0.00482EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/20 1:15 p.m.•11 views

CVE-2025-3826

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.1CVSS4AI score0.00396EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/04/20 11:31 a.m.•12 views

CVE-2025-3825 SourceCodester Web-based Pharmacy Product Management System add-category.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategoryname leads to cross site scriptin...

4.8CVSS6.2AI score0.00396EPSS
SaveExploits1References4
CVE
CVE
•added 2025/04/20 10:31 a.m.•90 views

CVE-2025-3823

CVE-2025-3823 affects SourceCodester Web-based Pharmacy Product Management System 1.0. the vulnerable area is the add-stock.php file where manipulation of the parameters txttotalcost, txtproductID, txtprice, and txtexpirydate leads to cross-site scripting. described impacts include remote exploit...

4.8CVSS3.5AI score0.00412EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/04/20 12:00 a.m.•22 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which is caused by an error in the...

4.8CVSS4.3AI score0.00412EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•5 views

CVE-2025-3826: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.8CVSS3.8AI score0.00396EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•4 views

CVE-2025-3823: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. ...

4.8CVSS3.8AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•6 views

CVE-2025-3821: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file add-admin.php. The manipulation of the argument txtpassword/txtfullname/txtemail leads to cross site scripting. Th...

5.4CVSS3.6AI score0.00381EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•5 views

CVE-2025-3822: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...

5.4CVSS3.6AI score0.00453EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•6 views

CVE-2025-3824: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproductname leads to cross site scripting. T...

4.8CVSS3.6AI score0.00396EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/20 12:00 a.m.•6 views

CVE-2025-3825: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategoryname leads to cross site scriptin...

4.8CVSS3.6AI score0.00396EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2025/04/18 12:30 p.m.•74 views

TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog

Welcome to TruffleHog Explorer , a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to a credential a machine...

7.4AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/18 12:00 a.m.•20 views

PT-2025-17257 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /add-product.php. The manipulation of the Avatar argument leads to...

9.8CVSS6.3AI score0.00965EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/18 12:00 a.m.•6 views

CVE-2025-3783: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

9.8CVSS6.3AI score0.00965EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•7 views

CVE-2025-3764: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. T...

8.8CVSS6.3AI score0.00554EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•19 views

SourceCodester Web-based Pharmacy Product Management System 代码问题漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A code issue vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which stems from insufficient validation o...

8.8CVSS6.8AI score0.00554EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•3 views

CVE-2025-3765: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack may be...

8.8CVSS6.3AI score0.00554EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/16 9:15 p.m.•33 views

CVE-2025-3729

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os...

9.8CVSS5.6AI score0.03259EPSS
SaveExploits1References5
NVD
NVD
•added 2025/04/16 4:15 p.m.•28 views

CVE-2025-20178

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This vulnerability is due to insufficient integrity...

7.2CVSS0.00365EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/16 2:31 p.m.•43 views

CVE-2025-3696 SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/searchstock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. Th...

6.5CVSS0.00525EPSS
SaveExploits1References5
Rows per page
Query Builder