Vulnerabilidades de Angeljudesuarez
CVEs publicadas que afetam produtos de Angeljudesuarez: 94 registro(s), com severidade, exploração e correções.
Student Management System 21Society Management System 15University Management System 9Covid Tracking System 9Open Source Job Portal 7College Management System 7Online Loan Management System 5Hostel Management System 4School Management System 4Online Voting System 4Payroll Management System 2Human Resource Management System 2Online Examination System 1Online Clinic Management System 1Billing System 1Covid Tracking System Using Qr-code 1Sports Management System 1
CVE-2025-12608
Crítica · 9.8
CWE-89 02/11/2025
itsourcecode Online Loan Management System manage_user.php sql injection
A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manage_user.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
CVE-2025-12607
Crítica · 9.8
CWE-89 02/11/2025
itsourcecode Online Loan Management System manage_payment.php sql injection
A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /manage_payment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2025-12606
Crítica · 9.8
CWE-89 02/11/2025
itsourcecode Online Loan Management System manage_borrower.php sql injection
A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manage_borrower.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVE-2025-12605
Crítica · 9.8
CWE-89 02/11/2025
itsourcecode Online Loan Management System manage_loan.php sql injection
A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manage_loan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
CVE-2025-12604
Crítica · 9.8
CWE-89 02/11/2025
itsourcecode Online Loan Management System load_fields.php sql injection
A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /load_fields.php. The manipulation of the argument loan_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-11736
Crítica · 9.8
CWE-89 14/10/2025
itsourcecode Online Examination System index.php sql injection
A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVE-2025-11119
Média · 6.1
CWE-79 28/09/2025
itsourcecode Hostel Management System POST Request index.php cross site scripting
A security flaw has been discovered in itsourcecode Hostel Management System 1.0. Impacted is an unknown function of the file /justines/index.php of the component POST Request Handler. Performing manipulation of the argument from results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
CVE-2025-11101
Crítica · 9.8
CWE-74 28/09/2025
itsourcecode Open Source Job Portal index.php sql injection
A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
CVE-2025-11090
Alta · 8.8
CWE-74 27/09/2025
itsourcecode Open Source Job Portal index.php sql injection
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVE-2025-11088
Alta · 8.8
CWE-74 27/09/2025
itsourcecode Open Source Job Portal index.php sql injection
A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVE-2025-11078
Alta · 8.8
CWE-284 27/09/2025
itsourcecode Open Source Job Portal controller.php unrestricted upload
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVE-2025-11054
Alta · 8.8
CWE-74 27/09/2025
itsourcecode Open Source Job Portal index.php sql injection
A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11041
Alta · 8.8
CWE-74 26/09/2025
itsourcecode Open Source Job Portal index.php sql injection
A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-11040
Crítica · 9.8
CWE-74 26/09/2025
code-projects Hostel Management System index.php sql injection
A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/mod_users/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
CVE-2025-11038
Alta · 8.8
CWE-74 26/09/2025
itsourcecode Online Clinic Management System details.php sql injection
A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-10834
Crítica · 9.8
CWE-74 23/09/2025
itsourcecode Open Source Job Portal login.php sql injection
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument user_email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVE-2025-10813
Crítica · 9.8
CWE-74 22/09/2025
code-projects Hostel Management System index.php sql injection
A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVE-2025-10812
Crítica · 9.8
CWE-74 22/09/2025
code-projects Hostel Management System index.php sql injection
A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-9596
Crítica · 9.8
CWE-74 28/08/2025
itsourcecode Sports Management System login.php sql injection
A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.