Lucene search
+L

4888 matches found

attackerkb
attackerkb
•added 2026/01/28 8:32 p.m.•23 views

CVE-2026-1533

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminAddCategory.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the...

5.8CVSS5.1AI score0.004EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/28 3:17 a.m.•33 views

CVE-2025-69563

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter...

9.8CVSS5.9AI score0.00525EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•25 views

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters related to files, administrators, and the...

9.8CVSS7.2AI score0.00462EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•24 views

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters related to files, administrators, PHP, and...

9.8CVSS7.2AI score0.00462EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•11 views

CVE-2026-1535: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Administrator/PHP/AdminReply.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7.1AI score0.00462EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•12 views

CVE-2026-1534: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

9.8CVSS7.1AI score0.00462EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•12 views

CVE-2026-1533: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminAddCategory.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the...

9.8CVSS5.1AI score0.004EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/27 5:16 p.m.•29 views

CVE-2025-69563

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter...

9.8CVSS0.00525EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/27 9:23 a.m.•25 views

CVE-2026-1421

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS3.3AI score0.00292EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/27 12:00 a.m.•36 views

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to an unrestricted file upload in the admin_add.php component. This vulnerability allows for the upload of files with dangerous types. While the documents confirm the existence of the vulnerability and its location, specific exploitation details...

9.8CVSS5.8AI score0.00595EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•24 views

Code-Projects Mobile Shop Management System security vulnerabilities

Code-Projects Mobile Shop Management System is an open-source mobile store management system developed by Code-Projects. Version 1.0 of the code-projects Mobile Shop Management System contains a security vulnerability. This vulnerability stems from improper handling of the userid parameter in the...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•20 views

Code-Projects Computer Book Store Security Vulnerabilities

Code-Projects Computer Book Store is an open-source computer bookstore developed by Code-Projects. Version 1.0 of Code-Projects Computer Book Store contains a security vulnerability, which stems from a file upload vulnerability in the adminadd.php file...

9.8CVSS5.8AI score0.00595EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•26 views

Code-Projects Mobile Shop Management System security vulnerabilities

Code-Projects Mobile Shop Management System is an open-source mobile store management system developed by Code-Projects. Version 1.0 of the Code-Projects Mobile Shop Management System contains a security vulnerability. This vulnerability stems from improper handling of the Password parameter in t...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•6 views

CVE-2025-69563: Improper Neutralization of Special Elements used in an SQL Command

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter...

9.8CVSS5.9AI score0.00525EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•5 views

CVE-2025-69559: Unrestricted Upload of File with Dangerous Type

code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...

9.8CVSS5.8AI score0.00595EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•9 views

CVE-2025-69562: Improper Neutralization of Special Elements used in an SQL Command

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter...

9.8CVSS5.9AI score0.00525EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•5 views

CVE-2025-69565: Unrestricted Upload of File with Dangerous Type

code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/01/26 8:16 p.m.•19 views

CVE-2026-1443

A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published an...

9.8CVSS7.1AI score0.00554EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/26 8:02 p.m.•44 views

CVE-2026-1443 code-projects Online Music Site AdminDeleteUser.php sql injection

A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published an...

7.5CVSS0.00554EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/26 8:02 p.m.•16 views

CVE-2026-1443 code-projects Online Music Site AdminDeleteUser.php sql injection

A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published an...

7.5CVSS7.1AI score0.00554EPSS
SaveExploits1References5
Rows per page
Query Builder