Lucene search
+L

148538 matches found

Cvelist
Cvelist
added 2025/11/23 5:32 p.m.21 views

CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

7.5CVSS0.00379EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/23 5:2 p.m.16 views

CVE-2025-13560

CVE-2025-13560 affects SourceCodester Company Website CMS 1.0. The vulnerability is a SQL injection in the /admin/reset-password.php file triggered by manipulating the email parameter, with remote exploitable conditions and a publicly released exploit. Multiple sources (NVD/Red Hat/CVE records) a...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/23 5:2 p.m.20 views

CVE-2025-13560 SourceCodester Company Website CMS reset-password.php sql injection

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

7.5CVSS0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.9 views

PT-2025-47855

Name of the Vulnerable Software and Affected Versions SourceCodester Company Website CMS version 1.0 Description A flaw exists in SourceCodester Company Website CMS 1.0 that allows for SQL injection through manipulation of the Username argument in the file '/admin/index.php'. This allows for remo...

9.8CVSS7.5AI score0.00379EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.6 views

SourceCodester Company Website CMS SQL注入漏洞

SourceCodester Company Website CMS is a SourceCodester open source content management system. A SQL injection vulnerability exists in SourceCodester Company Website CMS version 1.0, which originates from the incorrect operation of the parameter Username in the file /admin/index.php, which may lea...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.7 views

SourceCodester Company Website CMS SQL注入漏洞

SourceCodester Company Website CMS is a SourceCodester open source content management system. A SQL injection vulnerability exists in SourceCodester Company Website CMS version 1.0, which originates from the incorrect operation of the parameter email in the file /admin/reset-password.php, which m...

9.8CVSS7.9AI score0.00379EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.9 views

PT-2025-47852

Name of the Vulnerable Software and Affected Versions SourceCodester Company Website CMS version 1.0 Description A SQL injection issue exists due to the manipulation of the email argument in the '/admin/reset-password.php' file. This allows for remote attacks. The exploit has been publicly...

9.8CVSS7.6AI score0.00379EPSS
SaveExploits1References12
Schneier on Security
Schneier on Security
added 2025/11/20 12:7 p.m.10 views

Scam USPS and E-Z Pass Texts and Websites

Google has filed a complaint in court that details the scam: In a complaint filed Wednesday, the tech giant accused "a cybercriminal group in China" of selling "phishing for dummies" kits. The kits help unsavvy fraudsters easily “execute a large-scale phishing campaign,” tricking hordes of...

6.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/20 12:21 a.m.17 views

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

6.5CVSS8.4AI score0.00235EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/19 4:15 p.m.8 views

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/19 12:0 a.m.8 views

PT-2025-47464

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

8.4AI score0.00235EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/19 12:0 a.m.4 views

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

8AI score0.00235EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2025/11/18 6:53 p.m.183 views

Exploit for Unrestricted Upload of File with Dangerous Type in Dnnsoftware Dotnetnuke

=== Description === DNN formerly DotNetNuke is an open-source...

10CVSS6.5AI score0.44656EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/11/18 10:49 a.m.10 views

CVE-2025-13275

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...

5.8CVSS4.8AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.8 views

CVE-2024-44652

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS8AI score0.00235EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/17 6:30 p.m.7 views

EUVD-2024-55093

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS7.5AI score0.00235EPSS
SaveExploits1References3
OSV
OSV
added 2025/11/17 6:15 p.m.7 views

CVE-2024-44651

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 6:15 p.m.11 views

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

6.5CVSS0.00235EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 5:15 p.m.9 views

CVE-2024-44652

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS0.00235EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 11:15 a.m.13 views

CVE-2025-13275

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...

5.8CVSS0.00276EPSS
SaveExploits0References4
Rows per page
Query Builder