30 matches found
CVE-2025-8408: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /filter1.php. The manipulation of the argument vehicle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-8374: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Vehicle Management 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /addcompany.php. The manipulation of the argument company leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-8329: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /filter3.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Code-Projects Vehicle Management 注入漏洞
Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...
PT-2024-39421 · Unknown · Code-Projects Vehicle Management
Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Management version 1.0 Description: A critical vulnerability was found in code-projects Vehicle Management. This issue affects an unknown part of the file /edit1.php. The manipulation of the argument sno leads to SQL...
CVE-2024-9087: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /edit1.php. The manipulation of the argument sno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...
CVE-2023-42253
Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...
CVE-2023-42253: Improper Neutralization of Input During Web Page Generation
Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...
CVE-2023-42253
Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...
PT-2023-28300
Name of the Vulnerable Software and Affected Versions Code-Projects Vehicle Management version 1.0 Description The issue concerns Cross Site Scripting XSS in the Add Accounts feature, specifically via the Invoice No, To, and Mammul fields. This allows for potential malicious script injection...