CVE-2025-0534: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Code/loginnew.php. The manipulation of the argument Username leads to sql injection. The attack may be...

CVE-2025-0533: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Code/sclogin.php. The manipulation of the argument uname leads to sql injection. The attack can b...

GHSA-HMG8-H7QF-7CXR

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:11:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1589...

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

PT-2025-3456 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The file upload feature in the affected system does not validate file extensions or MIME types, allowing an attacker to upload a PHP shell without restrictions and execute comman...

CVE-2024-57487

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from the vulnerability of the vehicalorcview parameter to cross-site scripting attacks...

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from a file upload feature that does not validate file extensions or MIME types, allowing an attacker t...

PT-2025-3457 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the vehicalorcview parameter in the "/admin/edit-vehicle.php" API endpoint. This flaw can be exploited by attackers to inject...

CVE-2024-57488: Improper Neutralization of Input During Web Page Generation

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

CVE-2024-57487: Improper Control of Generation of Code

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2024-13041 Incorrect User Management in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. A...

Code-Projects Online Bike Rental System 代码问题漏洞

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

CVE-2025-0346: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted upload. It is possible to...

Code-Projects Admission Management System 注入漏洞

Code-Projects Admission Management System is a Code-Projects open source enrollment management system. Code-Projects Admission Management System version 1.0 suffers from an injection vulnerability, which stems from an SQL injection in the parameter uid...

CVE-2025-0347: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php of the component Login. The manipulation of the argument uid leads to sql injection. The attack can be initiated remotely. Th...

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A code issue exists in Code-Projects Content Management System version 1.0 due to an unrestricted upload of the parameter image...

CVE-2025-0335: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...