Lucene search
+L

4873 matches found

Cvelist
Cvelist
•added 2025/01/17 4:00 p.m.•45 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS0.00447EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•21 views

PT-2025-3936 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code and classified as problematic. This issue affects unknown code of the file / parse/ feedback system.php. The manipulation of the type argument...

8.2CVSS4.4AI score0.00489EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•7 views

CVE-2025-0537: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross site scripting. The attack may be...

5.1CVSS3.9AI score0.00357EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•6 views

CVE-2025-0531: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS5.5AI score0.00447EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•7 views

CVE-2025-0530: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /parse/feedbacksystem.php. The manipulation of the argument type leads to cross site scripting. The attack can be initiated remotely. The exploit...

8.2CVSS3.8AI score0.00489EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•5 views

CVE-2025-0527: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /signupconfirm.php. The manipulation of the argument ineml leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.5AI score0.00709EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•2 views

PT-2025-3937

Name of the Vulnerable Software and Affected Versions code-projects Chat System version 1.0 Description A critical issue affects the processing of the file /user/leaveroom.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations...

7.5CVSS0.00447EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•6 views

PT-2025-3943

Name of the Vulnerable Software and Affected Versions code-projects Car Rental Management System version 1.0 Description A problematic issue has been found in the code-projects Car Rental Management System, affecting some unknown processing of the file /admin/manage-pages.php. The manipulation of...

5.1CVSS0.00357EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•7 views

CVE-2025-0529: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...

7.8CVSS5.9AI score0.00362EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/13 5:15 p.m.•30 views

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS0.00362EPSS
SaveExploits1References2
OSV
OSV
•added 2025/01/13 5:15 p.m.•20 views

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS5.8AI score0.02515EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•14 views

PT-2025-3456 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The file upload feature in the affected system does not validate file extensions or MIME types, allowing an attacker to upload a PHP shell without restrictions and execute comman...

6.5CVSS8.5AI score0.02515EPSS
SaveExploits3References6
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•13 views

PT-2025-3457 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the vehicalorcview parameter in the "/admin/edit-vehicle.php" API endpoint. This flaw can be exploited by attackers to inject...

6.5CVSS7.3AI score0.02515EPSS
SaveExploits3References7
CNNVD
CNNVD
•added 2025/01/13 12:00 a.m.•18 views

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from the vulnerability of the vehicalorcview parameter to cross-site scripting attacks...

6.5CVSS7.3AI score0.02515EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2025/01/13 12:00 a.m.•17 views

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from a file upload feature that does not validate file extensions or MIME types, allowing an attacker t...

6.5CVSS8.2AI score0.02515EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/13 12:00 a.m.•3 views

CVE-2024-57487: Improper Control of Generation of Code

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

6.5CVSS7.6AI score0.02515EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/13 12:00 a.m.•4 views

CVE-2024-57488: Improper Neutralization of Input During Web Page Generation

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS5.8AI score0.00362EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/13 12:00 a.m.•55 views

CVE-2024-57487

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

0.02515EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2025/01/09 7:00 a.m.•54 views

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00639EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•5 views

PT-2025-3834

Name of the Vulnerable Software and Affected Versions code-projects Online Bike Rental version 1.0 Description A problematic vulnerability has been found in the code-projects Online Bike Rental. The issue affects an unknown function of the file /vehical-details.php of the component HTTP GET Reque...

6.1CVSS0.00371EPSS
SaveExploits1References11
Rows per page
Query Builder