Lucene search
+L

4858 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•4 views

CVE-2025-11358: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and...

8.8CVSS5.6AI score0.00332EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•4 views

CVE-2025-11351: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec.php. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

8.8CVSS5.5AI score0.00325EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•10 views

CVE-2025-11347: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function moveuploadedfile of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated...

9.8CVSS5.2AI score0.00532EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/07 12:00 a.m.•19 views

PT-2025-40957

Name of the Vulnerable Software and Affected Versions code-projects Student Crud Operation versions up to 3.3 Description A flaw exists in code-projects Student Crud Operation that allows for unrestricted file uploads. This is due to manipulation of the move uploaded file function within the...

9.8CVSS6.8AI score0.00532EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•3 views

CVE-2025-11357: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS5.6AI score0.00332EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/06 6:15 p.m.•17 views

CVE-2025-11342

A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made availabl...

9.8CVSS5.8AI score0.00414EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/06 6:15 p.m.•19 views

CVE-2025-11343

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

8.6CVSS0.00413EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/06 6:02 p.m.•7 views

CVE-2025-11343 code-projects Student Crud Operation delete.php sql injection

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

7.5CVSS6.7AI score0.00413EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/06 6:02 p.m.•40 views

CVE-2025-11343 code-projects Student Crud Operation delete.php sql injection

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

7.5CVSS0.00413EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/06 5:32 p.m.•7 views

CVE-2025-11342 code-projects Online Course Registration edit-course.php sql injection

A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made availabl...

5.8CVSS6.7AI score0.00414EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 5:32 p.m.•47 views

CVE-2025-11342

Summary (CVE-2025-11342): Multiple connected sources confirm a SQL injection vulnerability in code-projects Online Course Registration 1.0, arising from lack of validation of the coursecode parameter in /admin/edit-course.php. The vulnerability is exploitable remotely and has publicly available e...

9.8CVSS6.7AI score0.00414EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/06 9:02 a.m.•10 views

CVE-2025-11329 code-projects Online Course Registration manage-students.php sql injection

A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00417EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/06 9:02 a.m.•33 views

CVE-2025-11329 code-projects Online Course Registration manage-students.php sql injection

A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•6 views

CVE-2025-11343: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

8.6CVSS5.6AI score0.00413EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•4 views

CVE-2025-11329: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•7 views

CVE-2025-11342: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made availabl...

9.8CVSS5.6AI score0.00414EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•18 views

PT-2025-40937

Name of the Vulnerable Software and Affected Versions code-projects Student Crud Operation version 3.3 Description A security issue exists in the delete.php file within code-projects Student Crud Operation 3.3. The manipulation of the ID argument can lead to SQL injection. This issue is potential...

8.6CVSS7.2AI score0.00413EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-25012

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00548EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-59315

Malicious code in bioql PyPI...

5.4CVSS5.2AI score0.00613EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-21222

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00509EPSS
SaveExploits1References5
Rows per page
Query Builder