Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:survey_application_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductSurvey Application System (c2facb40-8cec-5a8c-b4e3-fd15ec9aedd3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13060 vulnerable 2026-06-08 07:04:31.503689 SourceCodester Survey Application System view_survey.php sql injection
HIGH (7.3)
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-12T20:02:09.533Z
Updated: 2025-11-14T17:31:19.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12929 vulnerable 2026-06-08 07:04:31.215987 SourceCodester Survey Application System LoginRegistration.php update_user sql injection
HIGH (7.3)
A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.
Published: 2025-11-10T03:32:07.139Z
Updated: 2025-11-10T14:59:47.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1946 vulnerable 2026-06-08 05:52:37.264587 SourceCodester Survey Application System Add New cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the component Add New Handler. The manipulation of the argument Title with the input <script>prompt(document.domain)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225329 was assigned to this vulnerability.
Published: 2023-04-07T22:00:06.578Z
Updated: 2024-08-02T06:05:27.092Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.