Lucene search
+L

4870 matches found

Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•21 views

PT-2025-27332 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Inventory Management System, affecting unknown code of the file /orders.php. The manipulation of the argument i...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•5 views

CVE-2025-6826: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /PayrollManagementSystem/ajax.php?action=savedepartment. The manipulation of the argument ID leads to sql injection. T...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/28 12:00 a.m.•18 views

Code-Projects Inventory Management System 注入漏洞

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from insufficient filtering of user input in the /phpaction/editOrder.php file. No details of the vulnerability are available at this time...

9.8CVSS8AI score0.00505EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•2 views

CVE-2025-6827: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /phpaction/editOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

9.8CVSS5.5AI score0.00505EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•3 views

CVE-2025-6822: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•3 views

CVE-2025-6821: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /phpaction/createOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•22 views

PT-2025-27329 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This affects an unknown part of the file /php action/editOrder.php. The manipulation leads...

9.8CVSS8.1AI score0.00505EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•4 views

CVE-2025-6820: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /phpaction/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched...

9.8CVSS5.5AI score0.00505EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•32 views

PT-2025-27334 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This issue affects unknown code of the file /php action/editPayment.php. The manipulation ...

9.8CVSS8.2AI score0.00523EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•22 views

PT-2025-27324 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/editProduct.php, where the manipulation of the editProductName argument leads to SQL injection. The attack can ...

9.8CVSS8.4AI score0.00487EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•7 views

CVE-2025-6823: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•19 views

PT-2025-27320 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /php action/createProduct.php. The manipulation of the productName argument leads to SQL injection. The attack...

9.8CVSS8.1AI score0.00505EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•5 views

CVE-2025-6828: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /orders.php. The manipulation of the argument i leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•6 views

CVE-2025-6819: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/removeBrand.php. The manipulation of the argument brandId leads to sql injection. The attack can be launche...

9.8CVSS5.5AI score0.00505EPSS
SaveExploits1References1
CVE
CVE
•added 2025/06/27 8:31 p.m.•41 views

CVE-2025-6778

CVE-2025-6778 affects code-projects Food Distributor Site 1.0. The vulnerability is an XSS in an unknown function of /admin/save_settings.php, triggered by manipulating the arguments site_phone, site_email, or address. It can be exploited remotely, and multiple sources indicate the exploit has be...

4.8CVSS3.8AI score0.00365EPSS
SaveExploits1References8Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/27 12:00 a.m.•25 views

PT-2025-27258 · Unknown · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A vulnerability was found in the code-projects Food Distributor Site, affecting an unknown function of the file /admin/save settings.php. The manipulation of the argument site phone...

4.8CVSS6.7AI score0.00365EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•4 views

CVE-2025-6778: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Food Distributor Site 1.0. Affected is an unknown function of the file /admin/savesettings.php. The manipulation of the argument sitephone/siteemail/address leads to cross site scripting. It is possible to launch the...

4.8CVSS4AI score0.00365EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•16 views

Code-Projects Food Distributor Site 代码注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. A code injection vulnerability exists in Code-Projects Food Distributor Site version 1.0, which originates from cross-site scripting due to incorrect operation of the parameters sitephone/siteemail/address i...

4.8CVSS4.2AI score0.00365EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•21 views

Code-Projects Food Distributor Site 注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. Code-Projects Food Distributor Site version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameters username/password in the file...

9.8CVSS7.6AI score0.00574EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•2 views

CVE-2025-6777: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue affects some unknown processing of the file /admin/processlogin.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated...

9.8CVSS5.5AI score0.00574EPSS
SaveExploits1References1
Rows per page
Query Builder