CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3141 – SourceCodester Online Medicine Ordering System manage_category.php sql injection
https://notcve.org/view.php?id=CVE-2025-3141
03 Apr 2025 — A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. • https://github.com/Lena-lyy/SQL/blob/main/SQL2.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3140 – SourceCodester Online Medicine Ordering System view_category.php sql injection
https://notcve.org/view.php?id=CVE-2025-3140
03 Apr 2025 — A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /view_category.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/Lena-lyy/SQL/blob/main/SQL1.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3120 – SourceCodester Apartment Visitors Management System add-apartment.php sql injection
https://notcve.org/view.php?id=CVE-2025-3120
02 Apr 2025 — A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely. • https://github.com/byxs0x0/SQL/blob/main/SQL5.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3119 – SourceCodester Online Tutor Portal manage_course.php sql injection
https://notcve.org/view.php?id=CVE-2025-3119
02 Apr 2025 — A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/manage_course.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. • https://github.com/byxs0x0/SQL/blob/main/SQL4.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3118 – SourceCodester Online Tutor Portal view_course.php sql injection
https://notcve.org/view.php?id=CVE-2025-3118
02 Apr 2025 — A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/view_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/byxs0x0/SQL/blob/main/SQL3.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-3096 – Clinics Patient Management System SQL Injection
https://notcve.org/view.php?id=CVE-2025-3096
01 Apr 2025 — Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page. • https://www.cve.org/CVERecord?id=CVE-2022-2297 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2025-3045 – oretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injection
https://notcve.org/view.php?id=CVE-2025-3045
01 Apr 2025 — A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/byxs0x0/SQL/blob/main/SQL2.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3018 – SourceCodester Online Eyewear Shop Users.php sql injection
https://notcve.org/view.php?id=CVE-2025-3018
31 Mar 2025 — A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. • https://vuldb.com/?id.302070 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 1CVE-2025-2852 – SourceCodester Food Ordering Management System view_menu.php sql injection
https://notcve.org/view.php?id=CVE-2025-2852
27 Mar 2025 — A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menus/view_menu.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://hackmd.io/@gnol719/rJqOPiInye • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-2846 – SourceCodester Online Eyewear Shop Registration Users.php registration sql injection
https://notcve.org/view.php?id=CVE-2025-2846
27 Mar 2025 — A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects the function registration of the file /oews/classes/Users.php?f=registration of the component Registration. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. • https://github.com/jeajeaa/cve/blob/main/sql.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •