Lucene search
+L

10179 matches found

Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.11 views

PT-2025-54219

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A flaw exists in the function edit admin query located in the file /admin/edit admin query.php. Manipulation of the Username argument can lead to SQL injection. This issue is...

9.8CVSS7.6AI score0.00339EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2025/12/29 11:32 p.m.44 views

CVE-2025-15210 code-projects Refugee Food Management System editrefugee.php sql injection

A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This vulnerability affects unknown code of the file /home/editrefugee.php. Such manipulation of the argument a/b/c/sex/d/e/nationalitynid leads to sql injection. The attack may be launched remotely. Th...

6.5CVSS0.00321EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/29 11:15 p.m.8 views

CVE-2025-15208

A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/editrefugee.php. The manipulation of the argument rfid results in sql injection. The attack can be launched remotely. The exploit has bee...

9.8CVSS0.00339EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/29 11:2 p.m.18 views

CVE-2025-15209

CVE-2025-15209 affects code-projects Refugee Food Management System 1.0, specifically the /home/editfood.php handling of the a/b/c/d argument. The issue is a SQL injection caused by manipulating these parameters, with remote exploitation and a publicly available exploit. Multiple connected source...

9.8CVSS6.4AI score0.00321EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2025/12/29 6:30 p.m.3 views

EUVD-2025-205608

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

7.5CVSS7.3AI score0.00399EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/29 5:32 p.m.6 views

EUVD-2025-205626

A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing manipulation of the argument User can lead to sql injection. The attack may be launched remotely. The exploit has been made available to...

7.5CVSS7.2AI score0.00339EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2025/12/29 5:32 p.m.4 views

CVE-2025-15198

A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing a manipulation of the argument User can lead to sql injection. The attack may be launched remotely. The exploit has been made available ...

9.8CVSS5.4AI score0.00339EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/29 4:2 p.m.39 views

CVE-2025-15195 code-projects Assessment Management add-module.php sql injection

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

7.5CVSS0.00399EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/29 11:32 a.m.38 views

CVE-2025-15186 code-projects Refugee Food Management System addusers.php sql injection

A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00339EPSS
SaveExploits1References6
OSV
OSV
added 2025/12/29 11:15 a.m.4 views

CVE-2025-15184

A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugeesreport2.php. The manipulation of the argument a results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS5.7AI score0.00327EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/29 10:32 a.m.5 views

CVE-2025-15184 code-projects Refugee Food Management System refugeesreport2.php sql injection

A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugeesreport2.php. The manipulation of the argument a results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS6.6AI score0.00327EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/29 10:15 a.m.6 views

CVE-2025-15183

A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tfid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS0.0042EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/29 9:15 a.m.6 views

CVE-2025-15181

A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenateRefugeesList.php. Performing manipulation of the argument rfid results in sql injection. Remote exploitation of the attack is possible. Th...

9.8CVSS5.7AI score0.00339EPSS
SaveExploits1References6
CVE
CVE
added 2025/12/29 6:0 a.m.28 views

CVE-2025-13417

CVE-2025-13417 affects Plugin Organizer for WordPress (pre-10.2.4). The description and connected reports confirm a SQL injection flaw caused by not sanitizing/escaping a parameter before its use in a SQL statement, enabling subscribers to exploit it. Affected product/version: Plugin Organizer

8.6CVSS7.5AI score0.00243EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 6:0 a.m.9 views

EUVD-2025-205555

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...

8.6CVSS7.3AI score0.00243EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/29 4:15 a.m.7 views

CVE-2025-15169

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

7.2CVSS0.00394EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/29 3:15 a.m.14 views

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS0.00335EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/29 3:2 a.m.7 views

EUVD-2025-205547

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available ...

5.8CVSS6.3AI score0.00394EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/29 3:2 a.m.28 views

CVE-2025-15169

The CVE-2025-15169 entry concerns BiggiDroid Simple PHP CMS 1.0. Affected functionality is in /admin/editsite.php; manipulating the ID parameter can cause SQL injection. The issue is exploitable remotely and an exploit has been publicly released. Red Hat and other connected records corroborate th...

7.2CVSS5AI score0.00394EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/29 3:2 a.m.51 views

CVE-2025-15169 BiggiDroid Simple PHP CMS editsite.php sql injection

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

5.8CVSS0.00394EPSS
SaveExploits1References4
Rows per page
Query Builder