6.9

CVSS4.0

CVE-2025-4871 - PCMan FTP Server REST Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the publiโ€ฆ

๐Ÿ“… Published: May 18, 2025, 10:31 a.m. ๐Ÿ”„ Last Modified: June 12, 2025, 4:27 p.m.

6.9

CVSS4.0

CVE-2025-4870 - itsourcecode Restaurant Management System menu_save.php sql injection

A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. The attack can be initiated remotely. The exploit has been disclโ€ฆ

๐Ÿ“… Published: May 18, 2025, 10 a.m. ๐Ÿ”„ Last Modified: May 21, 2025, 7:40 p.m.

6.9

CVSS4.0

CVE-2025-4869 - itsourcecode Restaurant Management System member_update.php sql injection

A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_update.php. The manipulation of the argument menu leads to sql injection. It is possible to initiate the attack remotely. The exploit has beโ€ฆ

๐Ÿ“… Published: May 18, 2025, 9:31 a.m. ๐Ÿ”„ Last Modified: May 28, 2025, 11:48 a.m.

5.3

CVSS4.0

CVE-2025-4868 - merikbest ecommerce-spring-reactjs File Upload Endpoint admin path traversal

A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v1/admin/ of the component File Upload Endpoint. The manipulation of the argument fileโ€ฆ

๐Ÿ“… Published: May 18, 2025, 9 a.m. ๐Ÿ”„ Last Modified: April 15, 2026, 12:35 a.m.

7.1

CVSS4.0

CVE-2025-4867 - Tenda A15 ArpNerworkSet formArpNerworkSet denial of service

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosโ€ฆ

๐Ÿ“… Published: May 18, 2025, 8:31 a.m. ๐Ÿ”„ Last Modified: June 24, 2025, 2:38 p.m.

5.3

CVSS4.0

CVE-2025-4866 - weibocom rill-flow Management Console code injection

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mโ€ฆ

๐Ÿ“… Published: May 18, 2025, 8 a.m. ๐Ÿ”„ Last Modified: June 12, 2025, 4:28 p.m.

6.9

CVSS4.0

CVE-2025-4865 - itsourcecode Restaurant Management System member_save.php sql injection

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack may be initiated remotely. The exploit has bโ€ฆ

๐Ÿ“… Published: May 18, 2025, 7:31 a.m. ๐Ÿ”„ Last Modified: May 21, 2025, 7:40 p.m.

6.9

CVSS4.0

CVE-2025-4864 - itsourcecode Restaurant Management System finished.php sql injection

A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/finished.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has beenโ€ฆ

๐Ÿ“… Published: May 18, 2025, 7 a.m. ๐Ÿ”„ Last Modified: May 21, 2025, 7:40 p.m.

5.3

CVSS4.0

CVE-2025-4863 - Advaya Softech GEMS ERP Portal studentLogin.action sql injection

A vulnerability, which was classified as critical, was found in Advaya Softech GEMS ERP Portal 2.1. This affects an unknown part of the file /studentLogin/studentLogin.action. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploitโ€ฆ

๐Ÿ“… Published: May 18, 2025, 6:31 a.m. ๐Ÿ”„ Last Modified: June 12, 2025, 4:28 p.m.

5.3

CVSS4.0

CVE-2025-4862 - PHPGurukul Directory Management System searchdata.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /searchdata.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launchedโ€ฆ

๐Ÿ“… Published: May 18, 2025, 6 a.m. ๐Ÿ”„ Last Modified: May 21, 2025, 5:34 p.m.
Total resulsts: 349182
Page 5353 of 34,919
ยซ previous page ยป next page
Filters