Lucene search
+L

4888 matches found

osv_cve
osv_cve
•added 2025/11/16 7:15 a.m.•20 views

CVE-2025-13240

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9.8CVSS7.1AI score0.00472EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/16 7:02 a.m.•8 views

CVE-2025-13241 code-projects Student Information System index.php sql injection

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS7.1AI score0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 7:02 a.m.•32 views

CVE-2025-13241 code-projects Student Information System index.php sql injection

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS0.00472EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 7:02 a.m.•51 views

CVE-2025-13241

The CVE concerns code-projects Student Information System 2.0, where the vulnerability resides in the /index.php file. The Username parameter can be manipulated to achieve SQL injection, allowing remote execution. The issue is supported by multiple sources (NVD, Red Hat, CNVD, CNNVD, EUVD, VulnDB...

9.8CVSS7.1AI score0.00472EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 6:32 a.m.•10 views

CVE-2025-13240 code-projects Student Information System searchquery.php sql injection

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

7.5CVSS7.1AI score0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 6:32 a.m.•37 views

CVE-2025-13240 code-projects Student Information System searchquery.php sql injection

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

7.5CVSS0.00472EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•10 views

CVE-2025-13245: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.4CVSS3.6AI score0.00278EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•7 views

CVE-2025-13244: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

6.1CVSS3.7AI score0.00389EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•5 views

CVE-2025-13243: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

8.8CVSS6.2AI score0.00381EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•8 views

CVE-2025-13242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

9.8CVSS6.9AI score0.00472EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•7 views

CVE-2025-13241: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS7.1AI score0.00472EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•11 views

CVE-2025-13240: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9.8CVSS7.2AI score0.00472EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•17 views

PT-2025-47076

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0 Description A flaw exists in code-projects Student Information System 2.0, affecting unknown code within the /index.php file. Manipulation of the Username argument can lead to SQL injection,...

9.8CVSS7.1AI score0.00472EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•37 views

PT-2025-47080

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0 Description A security issue exists in code-projects Student Information System 2.0. The issue involves cross site scripting and impacts an unknown function within the /editprofile.php file...

5.1CVSS4.4AI score0.00278EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•25 views

PT-2025-47075

Name of the Vulnerable Software and Affected Versions Code-Projects Student Information System version 2.0 Description A flaw exists in Code-Projects Student Information System 2.0 related to SQL injection. The issue is located in the /searchquery.php file, where manipulation of the s argument ca...

9.8CVSS7.2AI score0.00472EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•21 views

PT-2025-47077

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0 Description A flaw exists in code-projects Student Information System version 2.0 related to the processing of the /register.php file. This can be exploited remotely to perform SQL injection...

9.8CVSS7.1AI score0.00472EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•21 views

Code-Projects Student Information System SQL Injection Vulnerability

Student Information System is a student information system. The Student Information System suffers from a SQL injection vulnerability that originates from the parameter s in the /searchquery.php file that does not effectively filter user input. An attacker can exploit this vulnerability by...

9.8CVSS7.4AI score0.00472EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•22 views

Code-Projects Student Information System SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from a lack of security filtering of the Username parameter in the /index.php file. No details of the vulnerability are available at this time...

9.8CVSS7.2AI score0.00472EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•19 views

Code-Projects Student Information System SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from improper handling of user input in the /register.php file. No details of the vulnerability are available at this time...

9.8CVSS7.2AI score0.00472EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•21 views

Code-Projects Student Information System SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from the /editprofile.php file not effectively filtering user input. No details of the vulnerability are available at this time...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References6
Rows per page
Query Builder