Lucene search
+L

28314 matches found

CNNVD
CNNVD
added 2025/12/14 12:00 a.m.11 views

CampCodes Advanced Online Examination System SQL注入漏洞

CampCodes Advanced Online Examination System is an advanced online examination system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Advanced Online Examination System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.15 views

PT-2025-51163

A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.12 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in CampCodes Supplier Management System version 1.0, which stems from an incorrect manipulation of the parameter chkId in the file /admin/viewunit.php, which could lead t...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.10 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from incorrect manipulation of the parameter ID in the file /updatesubject.php, which...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.9 views

PT-2025-51143

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0 that allows for SQL injection. The issue is located in the /update subject.php file, specifically through manipulation o...

9.8CVSS7.6AI score0.00387EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.12 views

PT-2025-51153

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Cake Ordering System version 1.0. The issue is located in the /cakeshop/supplier.php file. Manipulation of the supplier...

9.8CVSS7.5AI score0.00387EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.20 views

PT-2025-51148

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A flaw exists in the Student File Management System that allows for remote code execution. The issue is located in the file /admin/delete user.php and involves the manipulati...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2025/12/13 8:02 p.m.11 views

CVE-2025-14578

A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /updateaccount.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.13 views

EUVD-2025-203267

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/loginquery.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit h...

7.5CVSS6.6AI score0.00518EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/12/13 6:30 p.m.18 views

EUVD-2025-203258

A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executing manipulation of the argument keyname can lead to sql injection. The attack may be performed from remote. The exploit has been made...

6.5CVSS6.3AI score0.00351EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/13 6:30 p.m.9 views

EUVD-2025-203261

A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

7.5CVSS6.6AI score0.00441EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/13 6:30 p.m.15 views

EUVD-2025-203257

A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

7.5CVSS6.5AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/13 6:30 p.m.13 views

EUVD-2025-203265

A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file loginquery.php. Performing manipulation of the argument studno results in sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS6.5AI score0.00518EPSS
SaveExploits1References7
OSV
OSV
added 2025/12/13 5:15 p.m.12 views

CVE-2025-14621

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument userid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/13 4:02 p.m.27 views

CVE-2025-14620

CVE-2025-14620 affects code-projects Student File Management System 1.0. The vulnerability resides in the /admin/login_query.php component, where manipulation of the Username parameter enables SQL injection. The issue appears to be exploitable remotely, and publicly disclosed exploit details exis...

9.8CVSS6.8AI score0.00518EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/13 4:02 p.m.6 views

CVE-2025-14620 code-projects Student File Management System login_query.php sql injection

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/loginquery.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit h...

7.5CVSS6.8AI score0.00518EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/12/13 4:02 p.m.42 views

CVE-2025-14620 code-projects Student File Management System login_query.php sql injection

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/loginquery.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit h...

7.5CVSS0.00518EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/12/13 12:02 p.m.43 views

CVE-2025-14590 code-projects Prison Management System search1.php sql injection

A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

7.5CVSS0.00441EPSS
SaveExploits1References5
Veracode
Veracode
added 2025/12/13 7:43 a.m.14 views

SQL Injection

assyncmy is vulnerable to SQL Injection. The vulnerability is due to improper handling of crafted dictionary keys in SQL query construction, which allows an attacker to inject and execute arbitrary SQL commands...

9.8CVSS6.1AI score0.0043EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2025/12/13 7:39 a.m.14 views

SQL Injection

LangGraph SQLite Checkpoint is vulnerable to SQL injection. The vulnerability is due to unsafe construction of SQL queries using unvalidated metadata filter keys, where attacker-controlled keys are interpolated directly into SQL f-strings in the checkpoint search logic, allowing manipulation of...

7.8CVSS7.6AI score0.02306EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder