Lucene search
K

3485 matches found

Cvelist
Cvelist
added 2025/12/14 3:2 a.m.17 views

CVE-2025-14643 code-projects Simple Attendance Record System check.php sql injection

A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

7.5CVSS0.00028EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 3:2 a.m.1 views

CVE-2025-14643 code-projects Simple Attendance Record System check.php sql injection

A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

7.5CVSS6.5AI score0.00028EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 2:32 a.m.1 views

CVE-2025-14642 code-projects Computer Laboratory System technical_staff_pic.php unrestricted upload

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technicalstaffpic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...

5.8CVSS6.6AI score0.00049EPSS
Exploits1References5
CVE
CVE
added 2025/12/14 2:32 a.m.10 views

CVE-2025-14642

Affects: code-projects Computer Laboratory System 1.0. The vulnerability is in the file technical_staff_pic.php, where manipulation of the image parameter can lead to unrestricted file upload. This is described across CNVD/CNVD-derived entries and other references as a remote vulnerability with a...

7.2CVSS6.6AI score0.00049EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/14 2:32 a.m.21 views

CVE-2025-14642 code-projects Computer Laboratory System technical_staff_pic.php unrestricted upload

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technicalstaffpic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...

5.8CVSS0.00049EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 2:2 a.m.3 views

CVE-2025-14641 code-projects Computer Laboratory System admin_pic.php unrestricted upload

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/adminpic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be use...

5.8CVSS6.5AI score0.00049EPSS
Exploits1References5
CVE
CVE
added 2025/12/14 2:2 a.m.8 views

CVE-2025-14641

The connected CNVD, RH Red Hat entry, CNNVD, EUVD, NVD, CVE/CVEList, and CVE Records describe a vulnerability in code-projects Computer Laboratory System 1.0 affecting /admin/admin_pic.php where mishandling of the image parameter enables unrestricted file upload. This is a remote-exploitable flaw...

7.2CVSS6.5AI score0.00049EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/14 2:2 a.m.17 views

CVE-2025-14641 code-projects Computer Laboratory System admin_pic.php unrestricted upload

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/adminpic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be use...

5.8CVSS0.00049EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 1:32 a.m.2 views

CVE-2025-14640 code-projects Student File Management System save_student.php sql injection

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

7.5CVSS6.6AI score0.0004EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/14 1:32 a.m.18 views

CVE-2025-14640 code-projects Student File Management System save_student.php sql injection

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

7.5CVSS0.0004EPSS
Exploits1References6
CVE
CVE
added 2025/12/14 1:32 a.m.7 views

CVE-2025-14640

Affects Code-Projects Student File Management System 1.0. The vulnerability is an SQL injection in the /admin/save_student.php handler, triggered by manipulating the stud_no (or student_no) parameter due to lack of input validation. This can be exploited remotely (attack vector NETWORK) and may a...

9.8CVSS7.2AI score0.0004EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.3 views

Code-Projects Computer Laboratory System 代码问题漏洞

Computer Laboratory System is a computer laboratory system. Computer Laboratory System has a file upload vulnerability that originates from a misbehavior of the parameter image in the file technicalstaffpic.php, which can be exploited by an attacker to cause an arbitrary file upload...

7.2CVSS5.2AI score0.00049EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.2 views

Code-Projects Computer Laboratory System 代码问题漏洞

Computer Laboratory System is a computer laboratory system. Computer Laboratory System has a file upload vulnerability that originates from the mishandling of the image parameter by an unknown handler function in the /admin/adminpic.php file. An attacker can exploit this vulnerability to upload...

7.2CVSS5.1AI score0.00049EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.2 views

Code-Projects Student File Management System SQL注入漏洞

Student File Management System is a student file management system. The Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentid in the file /admin/deletestudent.php. An...

9.8CVSS7.9AI score0.0004EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.3 views

Code-Projects Student File Management System 代码注入漏洞

Student File Management System is a student file management system. Student File Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file /admin/updatestudent.php, which can be exploited by a...

4.8CVSS4.1AI score0.00032EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.2 views

Code-Projects Student File Management System SQL注入漏洞

Student File Management System is a student file management system. A SQL injection vulnerability exists in Student File Management System, which originates from an incorrect manipulation of the parameter userid in the file /admin/deleteuser.php, and can be exploited by an attacker to obtain or...

9.8CVSS7.7AI score0.0004EPSS
Exploits1References7
EUVD
EUVD
added 2025/12/13 6:30 p.m.2 views

EUVD-2025-203265

A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file loginquery.php. Performing manipulation of the argument studno results in sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS6.5AI score0.00037EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/12/13 6:2 p.m.2 views

CVE-2025-14623 code-projects Student File Management System update_student.php sql injection

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

7.5CVSS6.7AI score0.0004EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/13 6:2 p.m.27 views

CVE-2025-14623 code-projects Student File Management System update_student.php sql injection

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

7.5CVSS0.0004EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/13 5:32 p.m.1 views

CVE-2025-14622 code-projects Student File Management System save_user.php sql injection

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/saveuser.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released...

7.5CVSS6.9AI score0.0004EPSS
Exploits1References6
Rows per page
Query Builder