Lucene search
+L

7412 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•2 views

CVE-2025-6612: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/removeCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated...

9.8CVSS5.5AI score0.00481EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•18 views

PT-2025-26882 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /php action/editBrand.php. The manipulation of the editBrandStatus argument leads to SQL...

9.8CVSS7.7AI score0.00481EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•2 views

CVE-2025-6665: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...

9.8CVSS5.5AI score0.00481EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•25 views

PT-2025-26747 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the system, affecting an unknown functionality of the file /student.php. The manipulation of the argument sname, contact, about, emailid, or...

6.1CVSS4.3AI score0.004EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•4 views

CVE-2025-6579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.5AI score0.00481EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•3 views

CVE-2025-6569: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. Affected by this vulnerability is an unknown functionality of the file /student.php. The manipulation of the argument sname/contact/about/emailid/transcationremark leads to cross site scripting. T...

6.1CVSS3.9AI score0.004EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•13 views

PT-2025-26789 · Code Projects · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical issue affects the processing of the file /message admin.php, where the manipulation of the Message argument leads to SQL injection. The attack can be initiated remotely...

9.8CVSS7.5AI score0.00481EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
•added 2025/06/23 8:39 a.m.•22 views

CVE-2025-6360

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /portal.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

9.8CVSS7.7AI score0.00487EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/23 4:15 a.m.•24 views

CVE-2025-6502

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00498EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/23 4:00 a.m.•54 views

CVE-2025-6503

CVE-2025-6503 affects code-projects Inventory Management System 1.0. The vulnerability is in processing /php_action/fetchSelectedCategories.php, where manipulating the categoriesId parameter leads to SQL injection. Exploitation can be remote, and public disclosure is noted. Multiple connected sou...

9.8CVSS7AI score0.00498EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/06/23 3:00 a.m.•43 views

CVE-2025-6501

Code-projects Inventory Management System 1.0 has a SQL injection in the /php_action/createCategories.php endpoint, triggered by the categoriesStatus parameter. The issue is remotely exploitable and the exploit has been publicly disclosed. Publicly accessible documents describe the vulnerability ...

9.8CVSS6.9AI score0.00487EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•18 views

PT-2025-26579 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This affects an unknown part of the file /php action/createCategories.php. The manipulatio...

9.8CVSS7.5AI score0.00487EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•17 views

PT-2025-26578 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Inventory Management System. The issue affects some unknown functionality of the file /php...

9.8CVSS7.5AI score0.00487EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/23 12:00 a.m.•5 views

CVE-2025-6501: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /phpaction/createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/23 12:00 a.m.•5 views

CVE-2025-6503: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/fetchSelectedCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated...

9.8CVSS5.5AI score0.00498EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/23 12:00 a.m.•5 views

CVE-2025-6500: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /phpaction/editCategories.php. The manipulation of the argument editCategoriesName leads to sql injection. The attac...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/23 12:00 a.m.•6 views

CVE-2025-6502: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.5AI score0.00498EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•16 views

PT-2025-26580 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been found in the code-projects Inventory Management System. The problem affects the file /php action/changePassword.php, where the manipulation of the us...

9.8CVSS7.5AI score0.00498EPSS
SaveExploits1References12
NVD
NVD
•added 2025/06/22 5:15 p.m.•25 views

CVE-2025-6484

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

7.2CVSS0.00525EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2025/06/22 4:31 p.m.•40 views

CVE-2025-6484 code-projects Online Shopping Store action.php sql injection

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

5.8CVSS0.00525EPSS
SaveExploits1References10
Rows per page
Query Builder