Lucene search
+L

16 matches found

OSV
OSV
•added 2025/09/22 10:15 p.m.•15 views

CVE-2025-10817

A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/adminuser.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made...

9.8CVSS7AI score0.00417EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•11 views

CampCodes Online Learning Management System SQL注入漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter firstname in the file...

9.8CVSS7.8AI score0.00417EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/04/05 6:35 p.m.•30 views

CVE-2025-3170

A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.7AI score0.00603EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/04/03 5:31 p.m.•17 views

CVE-2025-3170 Project Worlds Online Lawyer Management System admin_user.php sql injection

A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7.7AI score0.00603EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•3 views

CVE-2025-3170: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7AI score0.00603EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/14 6:15 p.m.•15 views

CVE-2024-50831

A SQL Injection was found in /admin/adminuser.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...

7.2CVSS5.8AI score0.00384EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•0 views

CVE-2024-50831: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/adminuser.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...

7.2CVSS5.7AI score0.00384EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/11/14 12:00 a.m.•40 views

CVE-2024-50837

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...

0.00475EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/10 6:15 a.m.•15 views

CVE-2024-3541

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

6.1CVSS3.9AI score0.00686EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/10 5:31 a.m.•19 views

CVE-2024-3541 Campcodes Church Management System admin_user.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

4CVSS6.2AI score0.00686EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/10 4:00 a.m.•14 views

CVE-2024-3537 Campcodes Church Management System admin_user.php sql injection

A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/adminuser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has bee...

6.5CVSS7.4AI score0.00882EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/10 4:00 a.m.•69 views

CVE-2024-3537

CVE-2024-3537 affects Campcodes Church Management System 1.0. The vulnerability lies in the /admin/admin_user.php file, where manipulation of the firstname parameter enables SQL injection due to improper input handling. The issue can be triggered remotely, and public exploit disclosures exist. Af...

8.8CVSS7.3AI score0.00882EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•1 views

CVE-2024-3541: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

6.1CVSS4AI score0.00686EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•13 views

Church Management System SQL注入漏洞

Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which originates from an SQL injection vulnerability in the firstname parameter of the /admin/adminuser.php file...

8.8CVSS7AI score0.00882EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•0 views

CVE-2024-3537: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/adminuser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS5.5AI score0.00882EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/01 12:00 a.m.•1 views

CVE-2024-0181: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/adminuser.php of the component Admin Panel. The manipulation of the argument Firstname/Lastname/Username lead...

4.8CVSS3.6AI score0.00562EPSS
SaveExploits1References2
Rows per page
Query Builder