Code-Projects School Fees Payment System 安全漏洞

School Fees Payment System is a tuition payment system. School Fees Payment System is vulnerable to a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. No details of the vulnerability are...

Code-Projects School Fees Payment System 代码注入漏洞

School Fees Payment System is a tuition payment system. School Fees Payment System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Branch/Address/Detail in the file /branch.php, which can be...

PT-2025-26444 · Unknown · Code-Projects Responsive Blog

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog version 1.0 Description: A problematic issue exists in code-projects Responsive Blog 1.0. The vulnerability affects an unknown functionality within the /search.php file. Manipulation of the argument keyword can...

CVE-2025-6364: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adduser-exec.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...

CVE-2025-6306: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/adminindex.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6304: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...

PT-2025-26310 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the system, leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendations: For code-projects School Fees...

PT-2025-26271 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical vulnerability has been found in the code-projects Online Shoe Store, affecting an unknown functionality of the file /contactus1.php. The manipulation of the Message argument...

CVE-2025-6352: Direct Request

A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-6347: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Responsive Blog 1.0/1.12.4/3.3.4. It has been declared as problematic. This vulnerability affects unknown code of the file /responsive/resblog/blogadmin/admin/pageViewMembers.php. The manipulation leads to cross site scripting. The attack can be initiate...

CVE-2025-6307: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /function/editcustomer.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-6296: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6295: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocatedrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack can be launched...

CVE-2025-6294: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostelname leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6293: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contactmanager.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

PT-2025-26311 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been found in the processing of the file /admin/admin football.php. The manipulation of the pid argument leads to SQL injection. The attack may be initiated remotel...

CVE-2025-6363: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /adding-exec.php. The manipulation of the argument ingname leads to sql injection. It is possible to launch the attack remotely...

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware. "The malware enables data exfiltration including credentials, browser data, and session tokens, remote access, and long-term...

CVE-2025-6159 code-projects Hostel Management System allocate_room.php sql injection

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6159 code-projects Hostel Management System allocate_room.php sql injection

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...