torrahclef records
5 published records for vendor torrahclef.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-73 External Control of File Name or Path2
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-29708No exploit | SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.torrahclef · company website cms · CWE-73 | Critical9.8 | — | 0.6% | Apr 16, 2025 |
39Monitor | CVE-2025-29709No exploit | SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.torrahclef · company website cms · CWE-73 | Critical9.8 | — | 0.6% | Apr 16, 2025 |
24Monitor | CVE-2025-29710No exploit | SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.torrahclef · company website cms · CWE-79 | Medium6.1 | — | 0.2% | Apr 16, 2025 |
22Monitor | CVE-2025-13560No exploit | SourceCodester Company Website CMS reset-password.php sql injectiontorrahclef · company website cms · CWE-74 | Medium5.5 | — | 0.3% | Nov 23, 2025 |
22Monitor | CVE-2025-13561No exploit | SourceCodester Company Website CMS index.php sql injectiontorrahclef · company website cms · CWE-74 | Medium5.5 | — | 0.3% | Nov 23, 2025 |
- CVE-2025-2970839Monitor
SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.
CriticalCVSS 9.8No exploitEPSS 0%torrahclef · company website cmsApr 16, 2025
- CVE-2025-2970939Monitor
SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.
CriticalCVSS 9.8No exploitEPSS 0%torrahclef · company website cmsApr 16, 2025
- CVE-2025-2971024Monitor
SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.
MediumCVSS 6.1No exploitEPSS 0%torrahclef · company website cmsApr 16, 2025
- CVE-2025-1356022Monitor
SourceCodester Company Website CMS reset-password.php sql injection
MediumCVSS 5.5No exploitEPSS 0%torrahclef · company website cmsNov 23, 2025
- CVE-2025-1356122Monitor
SourceCodester Company Website CMS index.php sql injection
MediumCVSS 5.5No exploitEPSS 0%torrahclef · company website cmsNov 23, 2025