CVE-2025-7173 code-projects Library System add-student.php sql injection

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-7173 code-projects Library System add-student.php sql injection

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-7171

CVE-2025-7171 concerns code-projects Crime Reporting System 1.0, where the file /policelogin.php exposes a SQL injection via the email parameter. Multiple connected sources confirm a critical, remotely exploitable vulnerability with publicly disclosed exploits. The exact affected functionality is...

CVE-2025-7169 code-projects Crime Reporting System complainer_page.php sql injection

A vulnerability classified as critical has been found in code-projects Crime Reporting System 1.0. Affected is an unknown function of the file /complainerpage.php. The manipulation of the argument location leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-7166

A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2025-7167 code-projects Responsive Blog Site category.php sql injection

A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

CVE-2025-7167

The CVE-2025-7167 entry concerns code-projects Responsive Blog Site 1.0. The affected component is the file /category.php where the manipulation of the ID parameter enables an SQL injection. This vulnerability is exploitable remotely and, per multiple sources, the exploit has been disclosed publi...

CVE-2025-7166 code-projects Responsive Blog Site single.php sql injection

A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2025-7166

CVE-2025-7166 affects the code-projects Responsive Blog Site 1.0, with vulnerability in an unknown part of /single.php where manipulating the ID parameter leads to SQL injection. Multiple connected sources describe remote exploitation and public disclosure, implying exploitability in practice. Th...

CVE-2025-7173: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-7178: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-28487 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue has been found in the code-projects Library System. The problem affects an unknown part of the file /user/teacher/books.php. The manipulation of the Search argument leads ...

PT-2025-28641 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue was found in the code-projects Chat System. The problem affects an unknown functionality of the file "/user/addmember.php". The manipulation of the ID argument leads to SQL...

PT-2025-28757 · Unknown · Code-Projects Jonnys Liquor

Name of the Vulnerable Software and Affected Versions: code-projects Jonnys Liquor version 1.0 Description: A critical issue exists in an unknown functionality of the file /browse.php. Manipulation of the Search argument results in SQL injection. The attack can be launched remotely. The exploit h...

CVE-2025-7186: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetchchat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-7184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. This affects an unknown part of the file /user/teacher/books.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-7181: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has be...

CVE-2025-7180: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-7179: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-7157: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has...