9 matches found
CVE-2025-15243: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-15011: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-14962: Improper Neutralization of Input During Web Page Generation
A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file /market/chatuser.php. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used...
CVE-2025-14959: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available...
CVE-2025-14968: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been released to...
CVE-2025-14834: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Simple Stock System 1.0. This affects an unknown function of the file /checkuser.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public...
Sql injection
Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection...
CVE-2024-24095
Code-projects Simple Stock System version 1.0 is vulnerable to SQL Injection (CWE-89). The vulnerability stems from the system's susceptibility to malicious SQL commands, which could impact the confidentiality, integrity, and availability of the data. The provided documents do not specify a parti...