Lerouxyxchire

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lerouxyxchire records in CISA KEV

No Lerouxyxchire vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Client Database Management System 19 records HIGH

Records

19 records

TI-2026-03252 CVE-2026-3762 · GHSA-jfj5-mv8j-63wv

SourceCodester Client Database Management System Endpoint superadmin_delete_manager.php improper authorization

HIGH 70

A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00547 Published 2026-03-08 No fix listed CWE-266

TI-2026-03224 CVE-2026-3734 · GHSA-h8wx-vp38-6823

SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorization

HIGH 70

A flaw has been found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-03-08 No fix listed CWE-266

TI-2025-05268 CVE-2025-5840 · GHSA-4p69-rxmq-26c6

SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

HIGH 70

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00506 Published 2025-06-07 No fix listed CWE-284

TI-2025-04760 CVE-2025-5299 · GHSA-2293-8xx3-2x87

SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

HIGH 70

A vulnerability was found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00686 Published 2025-05-28 No fix listed CWE-284

TI-2025-04484 CVE-2025-5002 · GHSA-4v8j-rhw9-4w63

SourceCodester Client Database Management System user_proposal_update_order.php sql injection

HIGH 70

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00562 Published 2025-05-20 No fix listed CWE-74

TI-2025-04414 CVE-2025-4924 · GHSA-wwq7-vmjh-7v57

SourceCodester Client Database Management System user_void_transaction.php sql injection

HIGH 70

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00525 Published 2025-05-19 No fix listed CWE-74

TI-2025-04413 CVE-2025-4923 · GHSA-8fmf-wf4h-2xc8

SourceCodester Client Database Management System user_delivery_update.php unrestricted upload

HIGH 70

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00533 Published 2025-05-19 No fix listed CWE-284

TI-2025-04401 CVE-2025-4909 · GHSA-7gvx-rvmq-cw57

SourceCodester Client Database Management System exposure of information through directory listing

HIGH 70

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00562 Published 2025-05-19 No fix listed CWE-548

TI-2026-03254 CVE-2026-3764 · GHSA-h82f-3qc4-wmjf

SourceCodester Client Database Management System superadmin_user_update.php improper authorization

MEDIUM 64

A vulnerability was determined in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-03-08 No fix listed CWE-266

TI-2025-39432 CVE-2025-63711 · GHSA-qm2h-8p28-f32f

A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database…

MEDIUM 64

A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without thei…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0021 Published 2025-11-10 No fix listed CWE-352

TI-2026-03251 CVE-2026-3761 · GHSA-w2vv-mpj3-mw89

SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorization

MEDIUM 57

A flaw has been found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-03-08 No fix listed CWE-266

TI-2025-13576 CVE-2025-14885 · GHSA-627j-54m3-3qr2

SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload

MEDIUM 57

A flaw has been found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2025-12-18 No fix listed CWE-284

TI-2025-04673 CVE-2025-5207 · GHSA-3mh5-w32f-4q7c

SourceCodester Client Database Management System superadmin_update_profile.php sql injection

MEDIUM 56

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00449 Published 2025-05-26 No fix listed CWE-74

TI-2025-28967 CVE-2025-46191 · GHSA-hxm6-cc9v-9f63

Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database…

MEDIUM 51

Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01202 Published 2025-05-09 No fix listed CWE-94

TI-2025-28969 CVE-2025-46193 · GHSA-pj3j-8874-c986

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code…

MEDIUM 50

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00755 Published 2025-05-09 No fix listed CWE-434

TI-2025-28964 CVE-2025-46188 · GHSA-6wp9-fhmq-qf9x

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.

MEDIUM 50

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2025-05-09 No fix listed CWE-89

TI-2025-28968 CVE-2025-46192 · GHSA-rvhv-2qpm-56c6

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in…

MEDIUM 49

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00418 Published 2025-05-09 No fix listed CWE-89

TI-2025-28966 CVE-2025-46190 · GHSA-qr56-hpqq-mc7v

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in…

MEDIUM 49

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00418 Published 2025-05-09 No fix listed CWE-89

TI-2025-28965 CVE-2025-46189 · GHSA-fxh7-543f-qcr8

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in…

MEDIUM 49

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00521 Published 2025-05-09 No fix listed CWE-89

Open these records in search →