3639 matches found
CVE-2025-8234 code-projects Online Ordering System delete_member.php sql injection
A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-8234 code-projects Online Ordering System delete_member.php sql injection
A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-8234
The CVE pertains to code-projects Online Ordering System 1.0. Affected component: /admin/delete_member.php. Root cause: manipulation of the ID parameter enables SQL injection. Impact: potential confidentiality, integrity, and availability harm; attack vector is remote and could be automated since...
CVE-2025-8233 code-projects Online Ordering System user.php sql injection
A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...
CVE-2025-8233 code-projects Online Ordering System user.php sql injection
A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...
CVE-2025-8233
Code-Projects Online Ordering System 1.0 is affected by a SQL injection in /admin/user.php via the un parameter. The vulnerability arises from improper handling of un, allowing remote exploitation and has publicly disclosed PoCs/exploits reported across multiple sources. Several connected documen...
CVE-2025-8232
A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-8232
A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-8232 code-projects Online Ordering System delete_user.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-8232 code-projects Online Ordering System delete_user.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-8232
CVE-2025-8232 affects code-projects Online Ordering System 1.0. The vulnerability exists in an unknown function of /admin/delete_user.php, where manipulating the ID parameter enables SQL injection. It can be exploited remotely and, according to sources, the exploit has been publicly disclosed. Se...
PT-2025-31009 · Code Projects · Code-Projects Online Ordering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System. The vulnerability is due to SQL injection in the /admin/product.php file. The Name argument is susceptible to...
Code-Projects Online Ordering System 注入漏洞
Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter Name in the file...
PT-2025-31008 · Code Projects · Code-Projects Online Ordering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A vulnerability exists in the Online Ordering System related to SQL injection. The issue is located in the /admin/delete member.php file. Manipulation of the ID argument can lead t...
Code-Projects Online Ordering System 注入漏洞
Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter Name in the file /admin/product.php...
Code-Projects Online Ordering System 注入漏洞
Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /admin/deleteuser.ph...
PT-2025-31012 · Code Projects · Online Ordering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System. The vulnerability is due to SQL injection in the /admin/edit product.php file. Manipulation of the Name argument ca...
CVE-2025-8234: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-8236: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2025-8233: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...