5 matches found
CVE-2025-11478
CVE-2025-11478 affects SourceCodester Farm Management System 1.0. The vulnerability stems from manipulation of the pid parameter in /myCart.php, enabling SQL injection and remote exploitation. Public exploits exist. Multiple connected sources corroborate the flaw, but there is no information in t...
CVE-2025-13200
CVE-2025-13200 affects SourceCodester Farm Management System 1.0. The vulnerability arises from an unknown functionality that allows information disclosure via directory listing, with a remote attack vector over the network. Public exploits have been disclosed. Public sources (NVD/Red Hat/EUVD/CV...
CVE-2025-11487
The CVE-2025-11487 entry concerns SourceCodester Farm Management System 1.0. Affected is the code path in /uploadProduct.php where manipulating the Type argument triggers an SQL injection. Multiple sources confirm remote exploit potential and that an exploit has been released publicly. The connec...
CVE-2025-11486
CVE-2025-11486 affects SourceCodester Farm Management System 1.0. The vulnerability is in the /buyNow.php file, where manipulation of the Name parameter enables a SQL injection. It is described as remotely exploitable, with a publicly available exploit. The Red Hat/NVD/CVE records and related fee...
CVE-2025-12926
The vulnerability CVE-2025-12926 affects SourceCodester Farm Management System 1.0. The issue is in the /review.php file where manipulation of the pid parameter enables SQL injection, allowing Remote code execution of the attack. Public exploits have been reported, indicating practical impact is ...