Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:simple_company_website:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductSimple Company Website (b519a479-f34d-53da-8e70-592c5d6fb831)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6873 vulnerable 2026-06-08 07:43:16.576089 SourceCodester Simple Company Website Users.php unrestricted upload
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T21:32:06.868Z
Updated: 2025-06-30T18:48:54.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6872 vulnerable 2026-06-08 07:43:16.575728 SourceCodester Simple Company Website SystemSettings.php unrestricted upload
MEDIUM (4.7)
A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T21:02:05.893Z
Updated: 2025-06-30T20:03:14.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6871 vulnerable 2026-06-08 07:43:16.575154 SourceCodester Simple Company Website Login.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T20:32:05.871Z
Updated: 2025-06-30T20:04:52.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6870 vulnerable 2026-06-08 07:43:16.574671 SourceCodester Simple Company Website Content.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T20:02:06.782Z
Updated: 2025-06-30T20:06:21.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6869 vulnerable 2026-06-08 07:43:16.574182 SourceCodester Simple Company Website manage.php sql injection
MEDIUM (4.7)
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/testimonials/manage.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-29T19:32:05.749Z
Updated: 2025-06-30T20:07:51.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6868 vulnerable 2026-06-08 07:43:16.573638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6867 vulnerable 2026-06-08 07:43:16.572483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.