Lucene search
+L

1654 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•1 views

CVE-2025-7220: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savedeductions. The manipulation of the argument ID leads to sql injection. The attack can be launched...

9.8CVSS5.5AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•0 views

CVE-2025-7218: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteposition. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS5.5AI score0.00412EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/07 4:02 p.m.•29 views

CVE-2025-7135 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savevacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiat...

7.5CVSS0.00415EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/07 2:02 p.m.•35 views

CVE-2025-7131 Campcodes Payroll Management System ajax.php sql injection

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveemployeeattendance. The manipulation of the argument employeeid leads to sql injection. The attack ca...

7.5CVSS0.00472EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/07 2:02 p.m.•10 views

CVE-2025-7131 Campcodes Payroll Management System ajax.php sql injection

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveemployeeattendance. The manipulation of the argument employeeid leads to sql injection. The attack ca...

7.5CVSS7.5AI score0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/07 1:02 p.m.•26 views

CVE-2025-7129 Campcodes Payroll Management System ajax.php sql injection

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteemployeeattendancesingle. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

7.5CVSS0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/07 12:32 p.m.•28 views

CVE-2025-7128 Campcodes Payroll Management System ajax.php sql injection

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculatepayroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

7.5CVSS0.00472EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•0 views

CVE-2025-7131: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveemployeeattendance. The manipulation of the argument employeeid leads to sql injection. The attack ca...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•1 views

CVE-2025-7129: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteemployeeattendancesingle. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•1 views

CVE-2025-7128: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculatepayroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•1 views

CVE-2025-7130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletepayroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•1 views

CVE-2025-7135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savevacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiat...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7132: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=savepayroll. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•1 views

CVE-2025-7134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteapplication. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
CVE
CVE
•added 2025/06/28 9:00 p.m.•51 views

CVE-2025-6826

The CVE-2025-6826 entry concerns code-projects Payroll Management System 1.0 where the vulnerability resides in /Payroll_Management_System/ajax.php?action=save_department. The root cause is an SQL injection caused by manipulation of the ID parameter, enabling remote exploitation. Public disclosur...

9.8CVSS7.5AI score0.00454EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•1 views

CVE-2025-6826: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /PayrollManagementSystem/ajax.php?action=savedepartment. The manipulation of the argument ID leads to sql injection. T...

9.8CVSS5.5AI score0.00454EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/06/21 10:31 p.m.•27 views

CVE-2025-6422 Campcodes Online Recruitment Management System About Content Page ajax.php unrestricted upload

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=savesettings of the component About Content Page. The manipulation of the argument img leads to...

6.5CVSS0.00449EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/21 10:31 p.m.•46 views

CVE-2025-6422

CVE-2025-6422 affects Campcodes Online Recruitment Management System 1.0, where an unrestricted upload is possible via /admin/ajax.php?action=save_settings (About Content Page) by manipulating the img parameter. The vulnerability is exploitable remotely and, per sources, the exploit has been disc...

8.8CVSS6.5AI score0.00449EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/21 12:00 a.m.•2 views

CVE-2025-6422: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=savesettings of the component About Content Page. The manipulation of the argument img leads to...

8.8CVSS5.3AI score0.00449EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/04 12:14 a.m.•21 views

CVE-2025-45387

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...

5.4CVSS6.8AI score0.00247EPSS
SaveExploits0References1
Rows per page
Query Builder