CVE-2024-13093: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...

PT-2025-1991 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability was found in the code of code-projects Job Recruitment. This issue affects the unknown code of the file / parse/ call job/search ajax.php of the component Job Pos...

PT-2025-3761 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting an unknown functionality of the file /admin/deleteroom.php. The manipulation of the id argument leads to SQL...

PT-2025-1992 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical issue has been found in the Seeker Profile Handler component, affecting some unknown processing of the file / parse/ call main search ajax.php. The manipulation of the argument...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the fact that incorrect manipulation of parameter s1 can lead to SQL injection...

CVE-2024-56261: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins Project Showcase gs-projects allows Stored XSS.This issue affects Project Showcase: from n/a through = 1.1.1...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the fact that incorrect manipulation of the parameter n can lead to SQL injection...

CVE-2025-0171: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2024-13092: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /parse/calljob/searchajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated...

PT-2025-3760 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical vulnerability was found in the code-projects Chat System. It affects an unknown function of the file /admin/deleteuser.php. The manipulation of the id argument leads to SQL...

CVE-2025-0168

CVE-2025-0168 affects code-projects Job Recruitment 1.0. The vulnerability is in the file /_parse/_feedback_system.php, where manipulating the parameter person leads to a SQL injection . The issue is exploitable remotely, and the exploit has been disclosed publicly. Connected documents corroborat...

CVE-2025-0168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /parse/feedbacksystem.php. The manipulation of the argument person leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from an incorrect manipulation of the parameter person that can lead to SQL injection...

CVE-2024-13072: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argument sids leads t...

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system by 1000 Projects. An injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter sids that can lead to SQL...

CVE-2024-13037

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-13035

CVE-2024-13035 affects code-projects Chat System 1.0. The vulnerability is a SQL injection in the /admin/update_user.php script caused by unsafely handling the id parameter (lack of input validation). Exploitation is possible remotely, and the exploit has been disclosed publicly per multiple sour...

CVE-2024-13034 code-projects Chat System update_user.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...