Lucene search
K

3490 matches found

Cvelist
Cvelist
added 2025/01/17 4:0 p.m.10 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS0.00056EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/01/17 4:0 p.m.7 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS7.4AI score0.00056EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/17 12:0 a.m.3 views

PT-2025-3936 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code and classified as problematic. This issue affects unknown code of the file / parse/ feedback system.php. The manipulation of the type argument...

8.2CVSS4.4AI score0.00144EPSS
Exploits1References9
OSV
OSV
added 2025/01/13 5:15 p.m.1 views

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS5.8AI score0.57887EPSS
Exploits3References2
NVD
NVD
added 2025/01/13 5:15 p.m.9 views

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS0.00098EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/01/13 12:0 a.m.13 views

CVE-2024-57487

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

0.57887EPSS
Exploits3References2
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from a file upload feature that does not validate file extensions or MIME types, allowing an attacker t...

6.5CVSS8.2AI score0.57887EPSS
Exploits3References2
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.4 views

PT-2025-3456 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The file upload feature in the affected system does not validate file extensions or MIME types, allowing an attacker to upload a PHP shell without restrictions and execute comman...

6.5CVSS8.5AI score0.57887EPSS
Exploits3References6
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.3 views

PT-2025-3457 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the vehicalorcview parameter in the "/admin/edit-vehicle.php" API endpoint. This flaw can be exploited by attackers to inject...

6.5CVSS7.3AI score0.57887EPSS
Exploits3References7
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from the vulnerability of the vehicalorcview parameter to cross-site scripting attacks...

6.5CVSS7.3AI score0.57887EPSS
Exploits3References2
Cvelist
Cvelist
added 2025/01/09 7:0 a.m.16 views

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00095EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

Code-Projects Admission Management System 注入漏洞

Code-Projects Admission Management System is a Code-Projects open source enrollment management system. Code-Projects Admission Management System version 1.0 suffers from an injection vulnerability, which stems from an SQL injection in the parameter uid...

9.8CVSS7.9AI score0.00097EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.4 views

PT-2025-3841 · Unknown · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Content Management System version 1.0 Description: A critical issue has been found in the code-projects Content Management System. It affects an unknown part of the file /admin/publishnews.php of the component Publish News Page...

7.2CVSS5.1AI score0.00073EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

Code-Projects Online Bike Rental System 代码问题漏洞

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

9.8CVSS6.7AI score0.00105EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A code issue exists in Code-Projects Content Management System version 1.0 due to an unrestricted upload of the parameter image...

7.2CVSS5.2AI score0.00073EPSS
Exploits1References5
NVD
NVD
added 2025/01/07 5:15 p.m.17 views

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS0.00191EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/07 4:31 p.m.22 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS0.00181EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/01/07 4:31 p.m.12 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS7.4AI score0.00181EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/07 4:0 p.m.13 views

CVE-2025-0298 code-projects Online Book Shop process_login.php sql injection

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00134EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.2 views

PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

6.5CVSS6.8AI score0.00257EPSS
Exploits1References8
Rows per page
Query Builder