Lucene search
K

3490 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 10:35 p.m.3 views

CVE-2024-8167

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

9.8CVSS7.2AI score0.00073EPSS
Exploits1References1
CVE
CVE
added 2025/02/02 3:31 p.m.60 views

CVE-2025-0967

CVE-2025-0967 affects Code-Projects Chat System 1.0. The vulnerability is a SQL injection in the file /user/add_chatroom.php, caused by unsafely handling the chatname/chatpass parameters. The issue is exploitable remotely and could allow an attacker to manipulate SQL statements, potentially expos...

7.5CVSS6.8AI score0.00041EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/02 3:31 p.m.10 views

CVE-2025-0967 code-projects Chat System add_chatroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/addchatroom.php. The manipulation of the argument chatname/chatpass leads to sql injection. The attack may be initiated remotely. The exploit has bee...

6.5CVSS6.8AI score0.00041EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/02/02 12:0 a.m.4 views

PT-2025-4115 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue affects some unknown processing of the file /user/add chatroom.php. The manipulation of the argument chatname/chatpass leads to SQL injection. The attack may be initiated...

7.5CVSS7.2AI score0.00041EPSS
Exploits1References12
Cvelist
Cvelist
added 2025/01/31 7:31 p.m.16 views

CVE-2025-0934 code-projects Job Recruitment _call_job_search_ajax.php sql injection

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/calljobsearchajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS0.00174EPSS
Exploits1References5
CVE
CVE
added 2025/01/31 7:31 p.m.55 views

CVE-2025-0934

CVE-2025-0934 affects code-projects Job Recruitment 1.0. The vulnerability stems from unsafely handling the n argument in the file /parse/_call_job_search_ajax.php, enabling SQL injection and potentially allowing remote exploitation. Multiple connected sources corroborate a remote-access risk wit...

7.5CVSS6.8AI score0.00174EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/31 12:0 a.m.2 views

PT-2025-4102 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code, classified as problematic. It affects an unknown part of the file /parse/ call job search ajax.php. The manipulation of the n argument leads to...

7.5CVSS7.1AI score0.00174EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/01/31 12:0 a.m.2 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from a manipulation of the parameter n that can lead to SQL injection...

7.5CVSS7AI score0.00174EPSS
Exploits1References5
OSV
OSV
added 2025/01/30 9:15 p.m.3 views

CVE-2025-0882

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.7AI score0.00197EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/01/30 9:0 p.m.14 views

CVE-2025-0882 code-projects Chat System addnewmember.php sql injection

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

6.5CVSS6.8AI score0.00197EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/30 9:0 p.m.10 views

CVE-2025-0882 code-projects Chat System addnewmember.php sql injection

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

6.5CVSS0.00197EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.3 views

Code-Projects Simple Plugins Car Rental Management 注入漏洞

Code-Projects Simple Plugins Car Rental Management is an open source car rental management plugin for Code-Projects. An injection vulnerability exists in Code-Projects Simple Plugins Car Rental Management version 1.0, which stems from the manipulation of the parameter id that can lead to SQL...

9.8CVSS7.1AI score0.00058EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.3 views

PT-2025-4083 · Code Projects · Code-Projects Simple Plugins Car Rental Management

Name of the Vulnerable Software and Affected Versions: code-projects Simple Plugins Car Rental Management version 1.0 Description: A critical issue has been found in the file "/admin/approve.php", where the manipulation of the id argument leads to SQL injection. The attack can be launched remotel...

9.8CVSS7.2AI score0.00058EPSS
Exploits1References10
OSV
OSV
added 2025/01/29 3:15 a.m.2 views

CVE-2025-0806

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects some unknown processing of the file calljobsearchajax.php. The manipulation of the argument jobtype leads to cross site scripting. The attack may be initiated remotely. The exploit...

6.1CVSS3.7AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/29 12:0 a.m.4 views

PT-2025-4062 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: This issue affects some unknown processing of the file call job search ajax.php. The manipulation of the job type argument leads to cross-site scripting. The attack may be initiated...

6.9CVSS6.6AI score0.00054EPSS
Exploits1References11
Cvelist
Cvelist
added 2025/01/19 1:31 a.m.13 views

CVE-2025-0563 code-projects Fantasy-Cricket update.php sql injection

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS0.00078EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/19 12:0 a.m.2 views

Code-Projects Fantasy-Cricket 注入漏洞

Code-Projects Fantasy-Cricket is a Code-Projects open source system. An injection vulnerability exists in Code-Projects Fantasy-Cricket version 1.0, which stems from the parameter uname in the file /dash/update.php that can cause SQL injection...

9.8CVSS7AI score0.00078EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/01/19 12:0 a.m.2 views

Code-Projects Fantasy-Cricket 注入漏洞

Code-Projects Fantasy-Cricket is a Code-Projects open source system. An injection vulnerability exists in Code-Projects Fantasy-Cricket version 1.0, which stems from the parameter uname in the file /authenticate.php that can cause SQL injection...

9.8CVSS7.9AI score0.00078EPSS
Exploits1References6
OSV
OSV
added 2025/01/17 4:15 p.m.0 views

CVE-2025-0530

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /parse/feedbacksystem.php. The manipulation of the argument type leads to cross site scripting. The attack can be initiated remotely. The exploit...

8.2CVSS3.7AI score
Exploits0References5
CVE
CVE
added 2025/01/17 4:0 p.m.40 views

CVE-2025-0531

CVE-2025-0531 affects code-projects Chat System 1.0. A SQL injection flaw exists in the /user/leaveroom.php?id= parameter caused by lack of input validation. This allows remote attackers to exploit the vulnerability, with confidentiality impact described as HIGH in the NVD metrics and public disc...

7.5CVSS7.7AI score0.00056EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder