Lucene search
K

3485 matches found

Cvelist
Cvelist
added 2025/12/11 8:32 p.m.17 views

CVE-2025-14537 code-projects Class and Exam Timetable Management preview7.php sql injection

A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument courseyearsection/semester causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00034EPSS
Exploits1References7
NVD
NVD
added 2025/12/11 8:15 p.m.2 views

CVE-2025-14536

A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be...

9.8CVSS0.00034EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/12/11 8:2 p.m.1 views

CVE-2025-14536 code-projects Class and Exam Timetable Management Login index.php sql injection

A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be...

7.5CVSS6.7AI score0.00034EPSS
Exploits1References7
CVE
CVE
added 2025/12/11 8:2 p.m.7 views

CVE-2025-14536

CVE-2025-14536 concerns Code-Projects Class and Exam Timetable Management 1.0. Affected component: the Login handler in /index.php where the parameters username and/or password can be manipulated to trigger a SQL injection . Reports from CNVD/CNNVD/Red Hat/NVD allege a remote, unauthenticated att...

9.8CVSS6.7AI score0.00034EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2025/12/11 8:2 p.m.17 views

CVE-2025-14536 code-projects Class and Exam Timetable Management Login index.php sql injection

A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be...

7.5CVSS0.00034EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.2 views

Code-Projects Class and Exam Timetable Management SQL注入漏洞

Class and Exam Timetable Management is a course and exam timetable management system. Class and Exam Timetable Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter courseyearsection/semester in the file...

9.8CVSS8AI score0.00034EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.3 views

PT-2025-50727

A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course year section/semester causes sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00034EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.1 views

Code-Projects Class and Exam Timetable Management 安全漏洞

Class and Exam Timetable Management is a course and exam timetable management system. Class and Exam Timetable Management suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameters username/password in the file...

9.8CVSS7.9AI score0.00034EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/12/09 4:30 p.m.2 views

CVE-2025-14251

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS7AI score0.00028EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/09 1:2 a.m.28 views

CVE-2025-14285 code-projects Employee Profile Management System edit_personnel.php sql injection

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS0.00028EPSS
Exploits1References5
CVE
CVE
added 2025/12/09 1:2 a.m.8 views

CVE-2025-14285

Code-projects Employee Profile Management System 1.0 is affected by a SQL injection in edit_personnel.php via the per_id parameter. The flaw enables remote exploitation and has publicly available exploits; multiple sources corroborate the issue. There is no product-specific patch details in the p...

9.8CVSS6.8AI score0.00028EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.4 views

Code-Projects Employee Profile Management System 安全漏洞

Employee Profile Management System is an employee profile management system. The Employee Profile Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter perid in the file editpersonnel.php. An...

9.8CVSS7.2AI score0.00028EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/08 10:20 p.m.0 views

CVE-2025-14203

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

8.8CVSS6.8AI score0.00027EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/08 6:30 p.m.1 views

EUVD-2025-201724

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS6.5AI score0.00028EPSS
Exploits1References6
OSV
OSV
added 2025/12/08 4:15 p.m.0 views

CVE-2025-14250

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

9.8CVSS5.8AI score0.00028EPSS
Exploits1References5
OSV
OSV
added 2025/12/08 4:15 p.m.1 views

CVE-2025-14251

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS5.7AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/08 4:2 p.m.1 views

CVE-2025-14251 code-projects Online Ordering System Admin Login admin sql injection

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS6.7AI score0.00028EPSS
Exploits1References5
CVE
CVE
added 2025/12/08 4:2 p.m.4 views

CVE-2025-14251

The CVE-2025-14251 entry concerns code-projects Online Ordering System v1.0. A SQL injection vulnerability exists in the Admin Login module, specifically via manipulation of the Username argument in the /admin/ path. The issue is exploitable remotely and is associated with the Admin Login compone...

9.8CVSS6.7AI score0.00028EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/08 4:2 p.m.17 views

CVE-2025-14251 code-projects Online Ordering System Admin Login admin sql injection

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS0.00028EPSS
Exploits1References5
CVE
CVE
added 2025/12/08 3:32 p.m.8 views

CVE-2025-14250

The CVE-2025-14250 entry corresponds to code-projects Online Ordering System 1.0 where the vulnerability originates in the /user_contact.php file, in the Name parameter. Multiple connected sources (CNVD-2026-00521, RH/CVE-2025-14250, CNNVD-202512-957, EUVD-2025-201729, NVD, CVELIST) describe a SQ...

9.8CVSS7.2AI score0.00028EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder