Lucene search
K

3490 matches found

RedhatCVE
RedhatCVE
added 2025/10/10 9:27 p.m.3 views

CVE-2025-11558

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

9.8CVSS6.8AI score0.00044EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/10 9:2 p.m.6 views

CVE-2025-11585 code-projects Project Monitoring System useredit.php sql injection

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS0.00042EPSS
Exploits1References5
CVE
CVE
added 2025/10/10 9:2 p.m.6 views

CVE-2025-11585

CVE-2025-11585 affects code-projects Project Monitoring System 1.0. The vulnerability is a SQL injection in the /useredit.php script caused by unsafely handling the uid parameter. Exploitation is remote and the exploit/public PoC has been reported in multiple sources (CNVD, RH, CNNVD, CVE referen...

9.8CVSS6.7AI score0.00042EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/10 8:32 p.m.7 views

CVE-2025-11584

The CVE-2025-11584 entry concerns code-projects Online Job Search Engine 1.0. Multiple connected sources confirm a SQL injection vulnerability in /searchjob.php, triggered by manipulating the txtspecialization parameter. This is described as remotely exploitable with the exploit publicly disclose...

9.8CVSS6.6AI score0.00042EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/10 8:32 p.m.1 views

CVE-2025-11584 code-projects Online Job Search Engine searchjob.php sql injection

A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.6AI score0.00042EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/10 8:32 p.m.5 views

CVE-2025-11584 code-projects Online Job Search Engine searchjob.php sql injection

A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS0.00042EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/10 8:2 p.m.3 views

CVE-2025-11583 code-projects Online Job Search Engine postjob.php sql injection

A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjob.php. Executing manipulation of the argument txtjobID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00042EPSS
Exploits1References5
CVE
CVE
added 2025/10/10 8:2 p.m.6 views

CVE-2025-11583

CVE-2025-11583 affects code-projects Online Job Search Engine 1.0, specifically the /postjob.php file. A vulnerability in the txtjobID parameter allows remote SQL injection due to lack of input validation, enabling an attacker to execute arbitrary SQL commands against the database and potentially...

9.8CVSS6.6AI score0.00042EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/10 8:2 p.m.8 views

CVE-2025-11582

The CVE-2025-11582 entry maps to concrete details across multiple sources: code-projects Online Job Search Engine 1.0 is affected by a SQL injection in the /registration.php script, via manipulation of the txtusername parameter. This is reported as exploitable remotely with public exploits. The C...

9.8CVSS6.9AI score0.00042EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/10 8:2 p.m.4 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS6.9AI score0.00042EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/10 8:2 p.m.7 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS0.00042EPSS
Exploits1References5
OSV
OSV
added 2025/10/10 4:15 p.m.1 views

CVE-2025-60307

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts...

9.8CVSS5.8AI score0.00056EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/10 4:26 a.m.3 views

CVE-2025-11530

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS6.9AI score0.0004EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.2 views

CVE-2025-11512

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/votersadd.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely. The exploit has...

6.1CVSS5.5AI score0.00038EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.3 views

CVE-2025-11513

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplierupdate.php. This manipulation of the argument suppid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

9.8CVSS7AI score0.00058EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.4 views

PT-2025-41592

Name of the Vulnerable Software and Affected Versions code-projects Online Job Search Engine version 1.0 Description A SQL injection issue exists in code-projects Online Job Search Engine 1.0. The flaw is located in the handling of the txtusername parameter within the /registration.php script...

7.5CVSS7.6AI score0.00042EPSS
Exploits1References11
OSV
OSV
added 2025/10/09 9:15 p.m.1 views

CVE-2025-11558

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

9.8CVSS5.7AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/09 9:2 p.m.2 views

CVE-2025-11558 code-projects E-Commerce Website user_index_search.php sql injection

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

7.5CVSS6.7AI score0.00044EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 9:2 p.m.6 views

CVE-2025-11558

CVE-2025-11558 affects code-projects E-Commerce Website 1.0, specifically the /pages/user_index_search.php file where the Search parameter can be manipulated to trigger SQL injection. Multiple connected sources (CNVD-2025-23975, RH:CVE-2025-11558, CNNVD-202510-1254, NVD/CVE-2025-11558, CVELIST) d...

9.8CVSS6.7AI score0.00044EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/09 9:2 p.m.5 views

CVE-2025-11558 code-projects E-Commerce Website user_index_search.php sql injection

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

7.5CVSS0.00044EPSS
Exploits1References5
Rows per page
Query Builder