Lucene search
+L

10440 matches found

CNNVD
CNNVD
•added 2025/12/21 12:00 a.m.•20 views

CampCodes Complete Online Beauty Parlor Management System SQL注入漏洞

Complete Online Beauty Parlor Management System is an online beauty parlor management system. Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the file...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/21 12:00 a.m.•19 views

SeaCMS SQL注入漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS 13.3 and earlier versions, which stems from the mishandling of the parameter page/limit b...

9.8CVSS7.8AI score0.00452EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/20 11:32 p.m.•44 views

CVE-2025-14989 Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

7.5CVSS0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/20 11:32 p.m.•8 views

CVE-2025-14989 Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

7.5CVSS7AI score0.00379EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/12/20 7:15 p.m.•25 views

CVE-2025-14961

A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The exploit is now publ...

9.8CVSS7AI score0.00384EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/20 3:12 p.m.•31 views

CVE-2025-14951

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/19 9:30 p.m.•19 views

EUVD-2025-204590

A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The exploit is now publ...

7.5CVSS6.6AI score0.00384EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/19 8:02 p.m.•11 views

CVE-2025-14968 code-projects Simple Stock System update.php sql injection

A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been released to...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/19 8:02 p.m.•34 views

CVE-2025-14968

CVE-2025-14968 affects Code-Projects Simple Stock System 1.0, specifically the /market/update.php file. The vulnerability arises from mishandling the email parameter, enabling SQL injection. The issue is exploitable remotely and an exploit has been publicly released. Multiple connected sources co...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2025/12/19 8:02 p.m.•20 views

CVE-2025-14968

A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been released to...

9.8CVSS5.4AI score0.00387EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/12/19 7:15 p.m.•28 views

CVE-2025-14961

A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The exploit is now publ...

9.8CVSS0.00384EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/19 6:32 p.m.•56 views

CVE-2025-14961 code-projects Simple Blood Donor Management System editedcampaign.php sql injection

A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The exploit is now publ...

7.5CVSS0.00384EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/19 6:15 p.m.•19 views

CVE-2025-14960

A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS5.7AI score0.00384EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/19 6:02 p.m.•20 views

EUVD-2025-204587

A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.3AI score0.00384EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2025/12/19 6:02 p.m.•9 views

CVE-2025-14959

A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available...

9.8CVSS5.4AI score0.00384EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/12/19 3:31 p.m.•18 views

EUVD-2025-204538

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addcategory.php. Performing manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be carried out remotely. The exploit is now...

7.5CVSS7.2AI score0.00441EPSS
SaveExploits1References7
NVD
NVD
•added 2025/12/19 3:15 p.m.•18 views

CVE-2025-14952

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addcategory.php. Performing a manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be carried out remotely. The exploit is now...

9.8CVSS0.00441EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/19 3:15 p.m.•23 views

CVE-2025-14952

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addcategory.php. Performing a manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be carried out remotely. The exploit is now...

9.8CVSS5.8AI score0.00441EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•19 views

CVE-2025-64371

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.6...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/19 6:30 a.m.•17 views

EUVD-2025-204440

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS6.3AI score0.0032EPSS
SaveExploits1References6
Rows per page
Query Builder