2004 matches found
CVE-2025-13274: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...
CVE-2025-13270: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...
CVE-2025-13271: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...
CVE-2025-13273: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...
CVE-2025-13269: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savepayment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-13057: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...
CVE-2025-7663: Missing Authorization
The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the /class-ovaem-ajax.php file in all versions up to, and including, 1.8.6. This makes it possible for unauthenticated attackers to delete ticket files,...
CVE-2025-12612: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletecourse. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...
CVE-2025-12347: Unrestricted Upload of File with Dangerous Type
A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...
CVE-2025-11171: Missing Authentication for Critical Function
The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...
EUVD-2015-9285
Malware in sbrugna...
EUVD-2019-5919
Malware in sbrugna...
EUVD-2012-2503
Malware in sbrugna...
EUVD-2017-9729
Malware in sbrugna...
EUVD-2015-6484
Malware in sbrugna...
EUVD-2014-9136
Malware in sbrugna...
EUVD-2018-8136
Malware in sbrugna...
EUVD-2015-9276
Malware in sbrugna...