Lucene search
+L

7166 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/02 12:00 a.m.•4 views

CVE-2025-0967: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/addchatroom.php. The manipulation of the argument chatname/chatpass leads to sql injection. The attack may be initiated remotely. The exploit has bee...

7.5CVSS5.5AI score0.00599EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/02 12:00 a.m.•17 views

PT-2025-4115 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue affects some unknown processing of the file /user/add chatroom.php. The manipulation of the argument chatname/chatpass leads to SQL injection. The attack may be initiated...

7.5CVSS7.2AI score0.00599EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/01 12:00 a.m.•3 views

CVE-2025-0961: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /parse/loadjob-details.php. The manipulation of the argument businessstreamname/companywebsiteurl leads to cross site...

5.4CVSS3.9AI score0.00417EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/31 7:31 p.m.•42 views

CVE-2025-0934 code-projects Job Recruitment _call_job_search_ajax.php sql injection

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/calljobsearchajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS0.00401EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/31 7:31 p.m.•93 views

CVE-2025-0934

CVE-2025-0934 affects code-projects Job Recruitment 1.0. The vulnerability stems from unsafely handling the n argument in the file /parse/_call_job_search_ajax.php, enabling SQL injection and potentially allowing remote exploitation. Multiple connected sources corroborate a remote-access risk wit...

7.5CVSS6.8AI score0.00401EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/31 12:00 a.m.•23 views

PT-2025-4102 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code, classified as problematic. It affects an unknown part of the file /parse/ call job search ajax.php. The manipulation of the n argument leads to...

7.5CVSS7.1AI score0.00401EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•4 views

CVE-2025-0934: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/calljobsearchajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS5.5AI score0.00401EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•26 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from a manipulation of the parameter n that can lead to SQL injection...

7.5CVSS7AI score0.00401EPSS
SaveExploits1References5
OSV
OSV
•added 2025/01/30 9:15 p.m.•18 views

CVE-2025-0882

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.7AI score0.00446EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/30 9:00 p.m.•28 views

CVE-2025-0882 code-projects Chat System addnewmember.php sql injection

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

6.5CVSS6.8AI score0.00446EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/30 9:00 p.m.•49 views

CVE-2025-0882 code-projects Chat System addnewmember.php sql injection

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

6.5CVSS0.00446EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/30 1:00 a.m.•18 views

CVE-2025-0847 1000 Projects Employee Task Management System Login index.php sql injection

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

7.5CVSS7.5AI score0.00599EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/30 12:00 a.m.•82 views

CVE-2025-0846

The CVE-2025-0846 vulnerability affects 1000 Projects Employee Task Management System v1.0, specifically in /admin/AdminLogin.php where the email parameter is susceptible to SQL injection. Attackers can remotely exploit this flaw, and public disclosures exist. Multiple feeds (NVD, Red Hat, CVE re...

9.8CVSS7.5AI score0.00516EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•1 views

CVE-2025-0847: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00599EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•2 views

CVE-2025-0882: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.4AI score0.00446EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•4 views

CVE-2025-0846: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.5AI score0.00516EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/30 12:00 a.m.•25 views

PT-2025-4083 · Code Projects · Code-Projects Simple Plugins Car Rental Management

Name of the Vulnerable Software and Affected Versions: code-projects Simple Plugins Car Rental Management version 1.0 Description: A critical issue has been found in the file "/admin/approve.php", where the manipulation of the id argument leads to SQL injection. The attack can be launched remotel...

9.8CVSS7.2AI score0.00543EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/01/30 12:00 a.m.•19 views

Code-Projects Simple Plugins Car Rental Management 注入漏洞

Code-Projects Simple Plugins Car Rental Management is an open source car rental management plugin for Code-Projects. An injection vulnerability exists in Code-Projects Simple Plugins Car Rental Management version 1.0, which stems from the manipulation of the parameter id that can lead to SQL...

9.8CVSS7.1AI score0.00543EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/30 12:00 a.m.•24 views

1000 Projects Employee Task Management System SQL注入漏洞

1000 Projects Employee Task Management System is an open source employee task management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Employee Task Management System version 1.0, which is caused by SQL injection due to parameter email...

9.8CVSS7.9AI score0.00516EPSS
SaveExploits0References5
OSV
OSV
•added 2025/01/29 3:15 a.m.•15 views

CVE-2025-0806

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects some unknown processing of the file calljobsearchajax.php. The manipulation of the argument jobtype leads to cross site scripting. The attack may be initiated remotely. The exploit...

6.1CVSS3.7AI score0.00574EPSS
SaveExploits1References5
Rows per page
Query Builder