CVE-2025-11113

CVE-2025-11113 affects CodeAstro Online Leave Application 1.0. The vulnerability is in /signup.php, where manipulating the city parameter results in SQL injection. The attack can be performed remotely and public exploits are known. Other parameters may also be affected. Several connected sources ...

CVE-2025-11113 CodeAstro Online Leave Application signup.php sql injection

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...

CVE-2025-11113 CodeAstro Online Leave Application signup.php sql injection

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...

CVE-2025-11113: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...

CodeAstro Online Leave Application SQL注入漏洞

CodeAstro Online Leave Application is an online leave application system from CodeAstro, Inc. A SQL injection vulnerability exists in CodeAstro Online Leave Application version 1.0, which stems from incorrect manipulation of the parameter city in the file /signup.php, which could lead to a SQL...

US Disrupts Massive Cell Phone Array in New York

This is a weird story: The US Secret Service disrupted a network of telecommunications devices that could have shut down cellular systems as leaders gather for the United Nations General Assembly in New York City. The agency said on Tuesday that last month it found more than 300 SIM servers and...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the formGetIptv() function in the microprogramming software for Tenda AX1803 allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formGetIptv function in the microprogrammed software for Tenda AX1803 arises from the issue of the operation going beyond the buffer in memory when processing the iptv.city.vlan parameter. Exploiting this vulnerability allows a remote attacker to compromise the...

WordPress City Hostel Theme <= 1.2.3 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme City Hostel versions = 1.2.3...

WordPress City Hostel Theme <= 1.2.3 is vulnerable to Local File Inclusion

Software City Hostel Type Theme Vulnerable versions = 1.2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 3b527ab49278 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Laundry City Theme <= 1.2.16 is vulnerable to Local File Inclusion

Software Laundry City Type Theme Vulnerable versions = 1.2.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a4cd7e73d762 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...

Malicious code in avail-able-albu-m-down-load-37259-chocolate-city-a5vgf-tutjjr (npm)

The package avail-able-albu-m-down-load-37259-chocolate-city-a5vgf-tutjjr was found to contain malicious code...

mccms 安全漏洞

mccms Man City CMS is a rapid website builder system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.7.0, which originates from improper handling of the pic parameter in the sysappscontrollersapiGf.php file, which may lead to SSRF...

CVE-2025-40682

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint...

VulnCheck KEV: CVE-2024-11587

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-40682

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint...

CVE-2025-40682: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint...

Online Appointment Booking System getmanagerregion.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System has a SQL injection vulnerability that originates from improper handling of the parameter city in the file /admin/getmanagerregion.php, which can be exploited by an attacker to obtain...

CVE-2025-7749: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /admin/getmanagerregion.php. The manipulation of the argument city leads to sql injection. The attack may be initiated...