Lucene search
+L

7414 matches found

Vulnrichment
Vulnrichment
•added 2025/08/29 5:02 p.m.•6 views

CVE-2025-9664 code-projects Simple Grading System Admin Panel add_student_grade.php sql injection

A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /addstudentgrade.php of the component Admin Panel. The manipulation of the argument Add results in sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS6.9AI score0.00486EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/29 4:32 p.m.•35 views

CVE-2025-9662

CVE-2025-9662 affects code-projects Simple Grading System 1.0, specifically the Admin Panel’s login.php. The vulnerability is a SQL injection in an unknown function of /login.php, exploitable remotely and publicly disclosed. Multiple sources corroborate an SQL injection risk impacting the authent...

9.8CVSS7.3AI score0.00596EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/29 4:32 p.m.•5 views

CVE-2025-9662 code-projects Simple Grading System Admin Panel login.php sql injection

A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly...

7.5CVSS6.8AI score0.00596EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/29 4:32 p.m.•26 views

CVE-2025-9662 code-projects Simple Grading System Admin Panel login.php sql injection

A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly...

7.5CVSS0.00596EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/29 3:32 a.m.•5 views

CVE-2025-9610 code-projects Online Event Judging System create_account.php sql injection

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...

7.5CVSS6.8AI score0.00417EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/29 3:32 a.m.•35 views

CVE-2025-9610

The CVE-2025-9610 entry relates to code-projects Online Event Judging System 1.0 with a SQL injection in /create_account.php. The fname parameter manipulation leads to SQL injection, enabling remote exploitation. Multiple connected sources confirm the vulnerability and public exploitation discuss...

9.8CVSS7.3AI score0.00417EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/08/29 12:00 a.m.•11 views

Code-Projects Student Information Management System 安全漏洞

Code-Projects Student Information Management System is a Code-Projects open source student information management system. A security vulnerability exists in Code-Projects Student Information Management System version 1.0, which originates from a cross-site scripting attack due to misuse of the...

6.1CVSS4.4AI score0.00395EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•5 views

CVE-2025-9662: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly...

9.8CVSS5.5AI score0.00596EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•4 views

CVE-2025-9664: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /addstudentgrade.php of the component Admin Panel. The manipulation of the argument Add results in sql injection. It is possible to launch the attack remotely. The exploit h...

8.8CVSS5.5AI score0.00486EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•3 views

CVE-2025-9610: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•7 views

CVE-2025-9665: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /editstudent.php of the component Admin Panel. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The...

8.8CVSS5.6AI score0.00389EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•7 views

CVE-2025-9666: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality of the file /deletestudent.php of the component Admin Panel. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely...

8.8CVSS5.5AI score0.00386EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•8 views

CVE-2025-9595: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has bee...

6.1CVSS4AI score0.00395EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/28 11:32 p.m.•36 views

CVE-2025-9595

The CVE-2025-9595 entry concerns code-projects Student Information Management System v1.0. The vulnerability is a cross-site scripting flaw in an unknown function of /login.php triggered by manipulation of the uname argument. It is exploitable remotely and an exploit has been publicly released. T...

6.1CVSS3.9AI score0.00395EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/28 11:32 p.m.•8 views

CVE-2025-9595 code-projects Student Information Management System login.php cross site scripting

A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has bee...

5.3CVSS5.2AI score0.00395EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2020-26415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab =12.2 ...

4.3CVSS5.1AI score0.00825EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2024-12431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthoriz...

4.3CVSS5.9AI score0.0043EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2020-13270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted publ...

8.8CVSS7.8AI score0.01374EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-1754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed...

5.3CVSS5.7AI score0.00296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-4018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper...

5.3CVSS5.5AI score0.00464EPSS
SaveExploits0References2
Rows per page
Query Builder