CVE-2025-8471

CVE-2025-8471 SQL 인젝션 PoC 저자 : Byte Reaper CVE : CVE-2025-8471 취약점 : "projectworlds Online Admission System v1.0"의 SQL 인젝션 설명 : adminlogin.php?aid=에 블라인드 SQL 인젝션이 존재합니다. 이 PoC는 다양한 페이로드2단계 INSERT … UNION SELECT …, SLEEP, SELECT code … 및 "딥 인젝션" 문자열를 포함한 일련의 GET 요청을 전송하여 응답 길이 차이를 통해 문제를 탐지하고 열거합니...

CVE-2026-19343

Code-projects Task Management System 1.0 contains an SQL injection in the file /admin/AdminLogin.php when manipulating the login arguments email/password. The issue is remote-exploitable and has a published exploit. Affected functionality is unknown in scope beyond AdminLogin input handling; no v...

CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

CVE-2026-19343: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

CVE-2025-14248: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the argument adminusername leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2024-46334: Improper Neutralization of Input During Web Page Generation

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via the formuser and formpassword parameters in /adminLogin.php...

CVE-2024-46334

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via the formuser and formpassword parameters in /adminLogin.php...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version 1.0, which stems from unvalidated formuser and formpassword parameters in adminLogin.php, which could lead to a...

EUVD-2022-53361

Malicious code in bioql PyPI...

EUVD-2022-28443

Malicious code in bioql PyPI...

EUVD-2024-33270

Malicious code in bioql PyPI...

CVE-2025-11118 CodeAstro Student Grading System adminLogin.php sql injection

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2025-11118: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2025-57119

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

PHPGurukul Online Library Management System 安全漏洞

Online Library Management System is an online library management system. An elevation of privilege vulnerability exists in the Online Library Management System, which is caused by a flaw in the adminlogin.php component and the Login function, and can be exploited by an attacker to cause an...

CVE-2025-57119: Execution with Unnecessary Privileges

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

PT-2025-37985

Name of the Vulnerable Software and Affected Versions: Online Library Management System version 3.0 Description: An issue allows an attacker to escalate privileges via the adminlogin.php component and the Login function. Recommendations: Apply updates to address the issue in version 3.0. As a...

CVE-2025-8471 projectworlds Online Admission System adminlogin.php sql injection

A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of the file /adminlogin.php. The manipulation of the argument aid leads to sql injection. The attack may be initiated remotely. The exploit ha...

PT-2025-31743 · Unknown · Projectworlds Online Admission System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Admission System version 1.0 Description: A critical vulnerability has been identified in projectworlds Online Admission System version 1.0. The issue affects unknown processing of the file /adminlogin.php. Manipulation o...

CVE-2025-8471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of the file /adminlogin.php. The manipulation of the argument aid leads to sql injection. The attack may be initiated remotely. The exploit ha...