662 matches found
EUVD-2007-2852
Malware in sbrugna...
EUVD-2017-9482
Malware in sbrugna...
EUVD-2020-17704
Malware in sbrugna...
EUVD-2012-6472
Malware in sbrugna...
EUVD-2024-51143
Malicious code in bioql PyPI...
EUVD-2024-16885
Malicious code in bioql PyPI...
EUVD-2024-31905
Malicious code in bioql PyPI...
EUVD-2023-30609
Malicious code in bioql PyPI...
CVE-2025-10427: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument websiteimage can lead to unrestricted upload. It is possible to launch the attack remotely. The...
PT-2025-37427
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A SQL injection issue exists in the /view user.php file due to manipulation of the ID argument. This allows for remote exploitation. The exploit is publicly available...
CVE-2025-8233 code-projects Online Ordering System user.php sql injection
A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...
CVE-2025-8233: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...
CVE-2025-5704: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/User.php. The manipulation of the argument txtUserName leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-5400
A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. It is...
CVE-2025-5400
CVE-2025-5400 affects the Blogbook product by Chaitak-Gorai, in the file /user.php (GET Parameter Handler). The vulnerability arises from unsafely handling the parameter u_id , enabling remote SQL injection. It is described as critical with potential high impact on confidentiality, integrity, and...
CVE-2025-5400 chaitak-gorai Blogbook GET Parameter user.php sql injection
A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. It is...
PT-2025-23421 · Unknown · Chaitak-Gorai Blogbook
Name of the Vulnerable Software and Affected Versions: chaitak-gorai Blogbook versions up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 Description: A critical vulnerability was found in chaitak-gorai Blogbook, affecting an unknown function of the file /user.php of the component GET Parameter...
CVE-2025-5400: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. It is...
CVE-2024-12842
A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...