Code-Projects Jonnys Liquor SQL注入漏洞

Code-Projects Jonnys Liquor is a content and management system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects Jonnys Liquor version 1.0, which stems from incorrect manipulation of the parameter Product in the file /detail.php, which could lead to SQL injecti...

PT-2025-47878

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

CVE-2025-13579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-13578: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

CVE-2025-13580: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

Code-Projects COVID Tracking System SQL注入漏洞

Code-Projects COVID Tracking System is a new Crown Pneumonia tracking system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects COVID Tracking System version 1.0, which stems from incorrect manipulation of the parameter code in the file /login.php, which could...

PT-2025-47870

Name of the Vulnerable Software and Affected Versions code-projects Blog Site version 1.0 Description A security issue exists in code-projects Blog Site 1.0 where manipulation of an unknown function within the /admin.php file can lead to improper authorization. This allows for remote initiation o...

CVE-2025-13571 code-projects Simple Food Ordering System listorder.php sql injection

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

CVE-2025-13571

CVE-2025-13571 affects Code-Projects Simple Food Ordering System 1.0, with a SQL injection vulnerability in /listorder.php triggered by manipulating the ID parameter. The issue is remotely exploitable, and public exploit information is cited in the initial data. Connected sources corroborate the ...

Code-Projects Simple Food Ordering System SQL注入漏洞

Code-Projects Simple Food Ordering System is a Code-Projects open source simple food ordering system. A SQL injection vulnerability exists in Code-Projects Simple Food Ordering System version 1.0, which stems from the incorrect manipulation of the parameter ID by an unknown function in the file...

CVE-2025-62297

SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when opening edited page. This issue was fixed in version 1.55...

cve

Here are some vulnerabilities related to variou...

CVE-2025-13449 code-projects Online Shop Project login.php sql injection

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

CVE-2025-13449

The CVE-2025-13449 entry concerns code-projects Online Shop Project 1.0. The vulnerability arises from improper handling of the Password parameter in the login.php processing, resulting in a SQL injection risk. Multiple connected sources (Red Hat, NVD, CVE lists, vulnerability enrichment) confirm...

CVE-2025-13449 code-projects Online Shop Project login.php sql injection

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

CVE-2025-13449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

Code-Projects Online Shop Project 安全漏洞

Code-Projects Online Shop Project is an online store project by Code-Projects. A security vulnerability exists in code-projects Online Shop Project version 1.0, which stems from an incorrect manipulation of the parameter Password in the file /login.php, which could lead to a SQL injection attack...

PT-2025-47552

Name of the Vulnerable Software and Affected Versions code-projects Online Shop Project version 1.0 Description A flaw exists in the processing of the /login.php file within the software. Manipulating the Password argument can lead to a SQL injection. This issue is remotely exploitable and detail...

Code-Projects Courier Management System SQL注入漏洞

Code-Projects Courier Management System is a Code-Projects open source courier management system. A SQL injection vulnerability exists in Code-Projects Courier Management System version 1.0, which stems from an incorrect manipulation of the parameter OfficeName in the file /add-office.php, which...

CVE-2025-13323 code-projects Simple Pizza Ordering System listorder.php sql injection

A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public...