Lucene search
+L

6950 matches found

EUVD
EUVD
•added 2025/10/11 3:33 p.m.•12 views

EUVD-2025-33866

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.5AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/11 2:15 p.m.•12 views

CVE-2025-11604

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/11 2:15 p.m.•15 views

CVE-2025-11604

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS0.00421EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/11 2:02 p.m.•6 views

CVE-2025-11604 projectworlds Online Ordering Food System all-orders.php sql injection

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.9AI score0.00421EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/11 2:02 p.m.•28 views

CVE-2025-11604 projectworlds Online Ordering Food System all-orders.php sql injection

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS0.00421EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/11 2:02 p.m.•32 views

CVE-2025-11604

CVE-2025-11604 affects ProjectWorlds Online Ordering Food System 1.0. The vulnerability arises from improper handling of the Status parameter in /all-orders.php, allowing an SQL injection via remote exploitation. Public exploit disclosed. Multiple sources (NVD, Red Hat, EUVD, CNNVD, CVE listing) ...

9.8CVSS6.9AI score0.00421EPSS
SaveExploits1References4Affected Software1
Patchstack
Patchstack
•added 2025/10/11 11:25 a.m.•19 views

WordPress Emails Catch All plugin <= 3.5.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Denver Jackson in WordPress Plugin Emails Catch All versions = 3.5.3...

8.8CVSS5.8AI score0.00471EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•14 views

Projectworlds Online Ordering Food System SQL注入漏洞

Projectworlds Online Ordering Food System is an online ordering food system from Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Ordering Food System version 1.0, which stems from an incorrect manipulation of the parameter Status in the file /all-orders.php, which coul...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/11 12:00 a.m.•15 views

PT-2025-41690

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Ordering Food System version 1.0 Description A SQL injection issue exists due to improper processing of the Status argument in the /all-orders.php file. Remote exploitation is possible. The exploit has been publicly...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/11 12:00 a.m.•4 views

CVE-2025-11604: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS6.9AI score0.00421EPSS
SaveExploits1References7
Snyk
Snyk
•added 2025/10/10 3:41 p.m.•9 views

Malicious Package

Overview lovable-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/10 3:52 a.m.•7 views

Malicious Package

Overview nf-iso-properties is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/10 3:37 a.m.•11 views

Malicious Package

Overview @evo-tech/backoffice-test-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/10 2:24 a.m.•8 views

Malicious Package

Overview frontend-layout is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/10 2:24 a.m.•10 views

Malicious Package

Overview cx-logger-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/10 2:24 a.m.•9 views

Malicious Package

Overview node-melitk-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/09 11:52 p.m.•7 views

Malicious Package

Overview vite-configs-viewer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/09 11:45 p.m.•15 views

Malicious Package

Overview phoenix-upper-funnel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/09 11:45 p.m.•9 views

Malicious Package

Overview mad-2.0.1.2.2.8. is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/09 11:45 p.m.•10 views

Malicious Package

Overview mad-3.0.1.2.2.8. is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder