24 matches found
CVE-2026-10225
creationtimestamp| type| source ---|---|--- 2026-06-01 07:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7ktplvaj2b...
CVE-2026-10225 raisulislamg4 student_management_system_by_php Login login_check.php sql injection
A vulnerability was detected in raisulislamg4 studentmanagementsystembyphp up to 310d950e09013d5133c6b9210aff9444382d16d1. This issue affects some unknown processing of the file logincheck.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The...
CVE-2018-10225
thinkphp 3.1.3 has SQL Injection via the index.php s parameter...
CVE-2025-10225
creationtimestamp| type| source ---|---|--- 2025-09-10 15:11:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyijew6lkq2g...
CVE-2024-10225
A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service DoS by appending a large number of characters to the end of a multipart boundary in a file upload request. This causes the server to continuously process each character, rendering the application...
CVE-2024-10225 Denial of Service in haotian-liu/llava
A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service DoS by appending a large number of characters to the end of a multipart boundary in a file upload request. This causes the server to continuously process each character, rendering the application...
CVE-2024-10225
CVE-2024-10225 affects haotian-liu/llava v1.2.0. The vulnerability allows a Denial of Service by appending a large number of characters to the end of a multipart boundary in a file upload request, causing the server to process each character and render the application inaccessible. The CVSS metri...
CVE-2019-10225
creationtimestamp| type| source ---|---|--- 2021-03-19 23:33:45+00:00| seen| https://t.me/cibsecurity/25207...
CVE-2019-10225
CVE-2019-10225 relates to a flaw in atomic-openshift (OpenShift 4.2) where the basic-user RBAC role does not sufficiently protect the GlusterFS StorageClass against leaking the restuserkey. An attacker with basic-user privileges could obtain the restuserkey and authenticate to the GlusterFS REST ...
CVE-2020-10225
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution...
CVE-2020-10225
CVE-2020-10225 affects PHPGurukul Job Portal 1.0 (admin/gallery.php). Unauthenticated file upload vulnerability allows remote attackers to upload content, including PHP files, potentially enabling command execution. Several connected sources (Red Hat CVE entry, CNVD/CVE records, and PT Security p...
CVE-2020-10225
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution...
CVE-2020-10225
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. Recent...
CVE-2016-10225
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/allwinnerbackdoor.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:45+00:00| seen|...
CVE-2018-10225
thinkphp 3.1.3 has SQL Injection via the index.php s parameter...
CVE-2018-10225
CVE-2018-10225 affects thinkphp 3.1.3. The vulnerability is a SQL injection via the index.php?s parameter, enabling crafted SQL statements to affect the backend database. Exploitation details are not provided in the connected documents; the CVSS info from NVD indicates CRITICAL impact (AV:N/AC:L/...
CVE-2018-10225
thinkphp 3.1.3 has SQL Injection via the index.php s parameter...
CVE-2017-10225
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality RES 3700. While the vulnerability i...
CVE-2017-10225
Summary of CVE-2017-10225 : A vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent OPS Operations) affects version 5.5. The issue is exploitable with local access (physical access is indicated as part of the attack model) and can lead to unau...
CVE-2016-10225
The CVE-2016-10225 issue affects the sunxi-debug driver in Allwinner 3.4 legacy kernels on H3, A83T and H8 devices. The flaw allows local users to gain root privileges by sending the string rootmydevice to /proc/sunxi_debug/sunxi_debug. Connected sources confirm related artifacts, including a ker...