Lucene search
+L

7414 matches found

Vulnrichment
Vulnrichment
•added 2025/09/28 2:32 p.m.•9 views

CVE-2025-11107 code-projects Simple Scheduling System addcourse.php sql injection

A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit...

7.5CVSS6.7AI score0.00417EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/28 2:02 p.m.•33 views

CVE-2025-11106 code-projects Simple Scheduling System addfaculty.php sql injection

A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS0.00417EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/28 2:02 p.m.•8 views

CVE-2025-11106 code-projects Simple Scheduling System addfaculty.php sql injection

A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS7AI score0.00417EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/28 1:02 p.m.•30 views

CVE-2025-11105 code-projects Simple Scheduling System addsubject.php sql injection

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

7.5CVSS0.00417EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/28 3:32 a.m.•11 views

CVE-2025-11094 code-projects E-Commerce Website admin_product_details.php sql injection

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

7.5CVSS6.7AI score0.00406EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/09/28 3:32 a.m.•31 views

CVE-2025-11094 code-projects E-Commerce Website admin_product_details.php sql injection

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

7.5CVSS0.00406EPSS
SaveExploits0References5
CVE
CVE
•added 2025/09/28 3:32 a.m.•36 views

CVE-2025-11094

CVE-2025-11094 affects code-projects E-Commerce Website 1.0. The vulnerability resides in the pages/admin_product_details.php script, where manipulation of the prod_id parameter leads to a SQL injection. The issue is exploitable remotely and has publicly disclosed exploit information. Multiple so...

9.8CVSS6.7AI score0.00406EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•4 views

CVE-2025-11124: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.4CVSS3.9AI score0.00286EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•3 views

CVE-2025-11108: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•6 views

CVE-2025-11106: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS5.5AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•3 views

CVE-2025-11094: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

9.8CVSS5.6AI score0.00406EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•5 views

CVE-2025-11115: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS5.5AI score0.00478EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•4 views

CVE-2025-11105: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

9.8CVSS5.5AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/27 7:33 p.m.•41 views

CVE-2025-11037

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...

7.5CVSS7AI score0.00505EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/27 6:32 p.m.•48 views

CVE-2025-11074

Affected software: code-projects Project Monitoring System 1.0. Vulnerability: SQL injection in the login.php file caused by unsafe handling of username/password inputs, enabling remote exploitation. Root cause/condition: Manipulation of the parameters in /login.php leads to SQL injection; exploi...

9.8CVSS6.6AI score0.00478EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/27 6:32 p.m.•7 views

CVE-2025-11074 code-projects Project Monitoring System login.php sql injection

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00478EPSS
SaveExploits1References5
OSV
OSV
•added 2025/09/27 3:15 p.m.•16 views

CVE-2025-11066

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/27 2:32 p.m.•8 views

CVE-2025-11066 code-projects Online Bidding System bidlist.php sql injection

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00478EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/27 2:32 p.m.•33 views

CVE-2025-11066 code-projects Online Bidding System bidlist.php sql injection

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

7.5CVSS0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/27 2:32 p.m.•37 views

CVE-2025-11066

The CVE-2025-11066 entry concerns code-projects Online Bidding System 1.0. A SQL injection vulnerability exists in the /administrator/bidlist.php file, triggered by manipulating the ID parameter in SQL queries. This can be exploited remotely and, in public references, the exploit has been publish...

9.8CVSS6.6AI score0.00478EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder