Lucene search
K

11 matches found

CNNVD
CNNVD
added 2026/02/07 12:0 a.m.4 views

ATutor SQL注入漏洞

ATutor is a set of open-source web-based Learning Content Management Systems LCMS developed by the Atutor team. This system includes modules for teaching content management, forums, chat rooms, etc. Version 2.2.4 of ATutor has a SQL injection vulnerability; this vulnerability stems from the...

7.1CVSS5.8AI score0.00012EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.5 views

PT-2026-1066

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that involves the processing of the /admin/delete.php file. Manipulation of the del argument within this file can lead to...

7.5CVSS6.9AI score0.0002EPSS
Exploits1References11
Vulnrichment
Vulnrichment
added 2025/09/17 5:2 p.m.2 views

CVE-2025-10602 SourceCodester Online Exam Form Submission delete_s1.php sql injection

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletes1.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS6.4AI score0.00058EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.1 views

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes8.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

9.8CVSS8.2AI score0.00204EPSS
Exploits1References5
OSV
OSV
added 2025/07/28 3:15 a.m.1 views

CVE-2025-8253

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/deletes6.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/07/28 12:0 a.m.1 views

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes6.php...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/07/28 12:0 a.m.1 views

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to manipulation of the parameter ID in the file /admin/deletes3.php...

9.8CVSS7.7AI score0.00277EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/07/28 12:0 a.m.2 views

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes4.php...

9.8CVSS7.8AI score0.00277EPSS
Exploits1References6
OSV
OSV
added 2024/08/16 8:15 p.m.1 views

CVE-2024-43011

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...

4.9CVSS5.9AI score0.00433EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.0 views

CVE-2022-28006

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeedelete.php...

8.8CVSS7.2AI score0.00359EPSS
Exploits1References4
CNVD
CNVD
added 2018/10/19 12:0 a.m.1 views

PHPSHE Arbitrary File Deletion Vulnerability

PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A security vulnerability exists in the admin.php?mod=db&act=del script in PHPSHE version 1.7. A remote attacker can exploit this vulnerability to delete arbitrary files wi...

7.5CVSS7.7AI score0.00869EPSS
Exploits1References1
Rows per page
Query Builder