Lucene search
+L

708 matches found

OSV
OSV
•added 2025/03/27 1:15 p.m.•10 views

CVE-2025-2847

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS6.5AI score
SaveExploits0References4
CVE
CVE
•added 2025/03/27 1:00 p.m.•77 views

CVE-2025-2847

Codezips Gym Management System 1.0 contains a SQL injection vulnerability in /dashboard/admin/over_month.php caused by unsafe handling of the mm parameter. The issue is exploitable remotely and is publicly disclosed; it allows an attacker with network access to potentially impact confidentiality,...

8.8CVSS6.8AI score0.00534EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/03/27 1:00 p.m.•35 views

CVE-2025-2847 Codezips Gym Management System over_month.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS0.00534EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/03/27 1:00 p.m.•14 views

CVE-2025-2847 Codezips Gym Management System over_month.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS6.8AI score0.00534EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•12 views

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter mm that can lead to SQL injection...

8.8CVSS7.1AI score0.00534EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•1 views

CVE-2025-2847: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS6.4AI score0.00534EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/25 9:19 p.m.•29 views

CVE-2025-2664

A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

7.2CVSS7.7AI score0.00503EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/23 9:15 p.m.•15 views

CVE-2025-2664

A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

7.2CVSS5.8AI score0.00503EPSS
SaveExploits1References4
NVD
NVD
•added 2025/03/23 9:15 p.m.•59 views

CVE-2025-2664

A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

7.2CVSS0.00503EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/03/23 9:00 p.m.•57 views

CVE-2025-2664 CodeZips Hospital Management System suadpeted.php sql injection

A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

5.8CVSS0.00503EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/23 9:00 p.m.•74 views

CVE-2025-2664

CVE-2025-2664 affects CodeZips Hospital Management System 1.0. The vulnerability is in the unknown-functionality of the file /suadpeted.php, where manipulation of the parameter ID leads to a SQL injection. The issue can be exploited remotely and exploit details have been disclosed publicly. Conne...

7.2CVSS7.4AI score0.00503EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/23 9:00 p.m.•12 views

CVE-2025-2664 CodeZips Hospital Management System suadpeted.php sql injection

A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

5.8CVSS7.3AI score0.00503EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•2 views

CVE-2025-2664: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

7.2CVSS5.3AI score0.00503EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•20 views

Codezips Hospital Management System 注入漏洞

Codezips Hospital Management System is an open source hospital management system from Codezips. An injection vulnerability exists in Codezips Hospital Management System version 1.0, which stems from an incorrect manipulation of a parameter ID that can lead to SQL injection...

7.2CVSS5.8AI score0.00503EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/03/05 8:43 a.m.•26 views

CVE-2025-1858

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

9.8CVSS7.8AI score0.00619EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/05 7:01 a.m.•19 views

CVE-2025-1854

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/delmember.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS7.6AI score0.00517EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/05 4:37 a.m.•35 views

CVE-2025-1850

A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument bookname leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7.3AI score0.00619EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/04 11:15 p.m.•38 views

CVE-2025-1959

A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /changespwd.php. The manipulation of the argument loginid/loginkey leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS0.00619EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/03/04 10:31 p.m.•54 views

CVE-2025-1959 Codezips Gym Management System change_s_pwd.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /changespwd.php. The manipulation of the argument loginid/loginkey leads to sql injection. It is possible to launch the attack remotely. The exploit has...

7.5CVSS0.00619EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/04 10:31 p.m.•84 views

CVE-2025-1959

CVE-2025-1959 affects Codezips Gym Management System 1.0. The vulnerability exists in an unknown function of /change_s_pwd.php, where manipulation of the login_id/login_key parameters enables SQL injection. Exploitation is remote, and multiple sources confirm public disclosure. No official patch/...

9.8CVSS7.5AI score0.00619EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder