CVE-2025-6902: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /phpaction/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely...

Code-Projects Movie Ticketing System 注入漏洞

Code-Projects Movie Ticketing System is Code-Projects open source movie ticketing system. Code-Projects Movie Ticketing System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to a misuse of the parameter postName in the file /logIn.php...

CVE-2025-6891: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /phpaction/createUser.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-6901: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

PT-2025-27440 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting unknown code in the file /book car.php. The manipulation of the fname argument leads to SQL injectio...

CVE-2025-6906: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

PT-2025-27435 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the ID argument leads t...

CVE-2025-6883: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /updateindex.php. The manipulation of the argument updateid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-6850 code-projects Simple Forum forum1.php sql injection

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-6850 code-projects Simple Forum forum1.php sql injection

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-6847

CVE-2025-6847 affects code-projects Simple Forum 1.0. The SQL injection vulnerability is in /forum_edit.php via the iii parameter; exploitation is remote and has been disclosed in multiple feeds. Connected sources confirm the issue and describe it as critical in significance, with varying CVSS re...

CVE-2025-6846 code-projects Simple Forum forum_viewfile.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Forum 1.0. This affects an unknown part of the file /forumviewfile.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-6846

CVE-2025-6846 affects code-projects Simple Forum 1.0, with a vulnerability in /forum_viewfile.php where the Name parameter can be manipulated to perform an SQL injection. The flaw is exploitable remotely and the exploit has been disclosed publicly. Multiple sources (NVD, CNVD, Red Hat, PT Securit...

CVE-2025-6845

CVE-2025-6845 affects code-projects Simple Forum version 1.0. The vulnerability is in the file /register1.php where manipulating the User parameter enables SQL injection. The issue can be exploited remotely and has been publicly disclosed. Public sources describe the vulnerability with various CV...

CVE-2025-6845 code-projects Simple Forum register1.php sql injection

A vulnerability was found in code-projects Simple Forum 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /register1.php. The manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-6844

A vulnerability was found in code-projects Simple Forum 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signin.php. The manipulation of the argument User leads to sql injection. The attack can be launched remotely. The exploit has bee...

CVE-2025-6842

A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edituser.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-6844

CVE-2025-6844 relates to code-projects Simple Forum 1.0, where the /signin.php endpoint’s parameter User is vulnerable to SQL injection. Multiple connected sources (NVD, Red Hat, CNVD/CNNVD, PT Security enrichment) confirm remote exploitation and public disclosure, with potential data theft impli...

CVE-2025-6844 code-projects Simple Forum signin.php sql injection

A vulnerability was found in code-projects Simple Forum 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signin.php. The manipulation of the argument User leads to sql injection. The attack can be launched remotely. The exploit has bee...

CVE-2025-6843

The CVE-2025-6843 entry concerns code-projects Simple Photo Gallery v1.0. The vulnerability is in an unknown function of the file /upload-photo.php, where manipulating the file_img parameter enables unrestricted file upload over the network and can be exploited remotely. Public disclosure of the ...