16 matches found
CVE-2025-10817
A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/adminuser.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made...
CampCodes Online Learning Management System SQL注入漏洞
CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter firstname in the file...
CVE-2025-3170
A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-3170 Project Worlds Online Lawyer Management System admin_user.php sql injection
A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-3170: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-50831
A SQL Injection was found in /admin/adminuser.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...
CVE-2024-50831: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/adminuser.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...
CVE-2024-50837
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...
CVE-2024-3541
A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
CVE-2024-3541 Campcodes Church Management System admin_user.php cross site scripting
A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
CVE-2024-3537 Campcodes Church Management System admin_user.php sql injection
A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/adminuser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has bee...
CVE-2024-3537
CVE-2024-3537 affects Campcodes Church Management System 1.0. The vulnerability lies in the /admin/admin_user.php file, where manipulation of the firstname parameter enables SQL injection due to improper input handling. The issue can be triggered remotely, and public exploit disclosures exist. Af...
CVE-2024-3541: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
Church Management System SQL注入漏洞
Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which originates from an SQL injection vulnerability in the firstname parameter of the /admin/adminuser.php file...
CVE-2024-3537: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/adminuser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has bee...
CVE-2024-0181: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/adminuser.php of the component Admin Panel. The manipulation of the argument Firstname/Lastname/Username lead...