CVE-2025-10795

The CVE-2025-10795 entry concerns code-projects Online Bidding System 1.0. A vulnerability exists in /administrator/bidupdate.php where manipulating the ID parameter enables SQL injection. The issue is remotely exploitable and has been disclosed publicly; multiple sources (NVD/CNVD/CVE lists and ...

CVE-2025-10791 code-projects Online Bidding System index.php sql injection

A weakness has been identified in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/index.php. This manipulation of the argument aduser causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available t...

CVE-2025-10790 SourceCodester Simple Forum Discussion System ajax.php sql injection

A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=savecategory. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10790

SourceCodester Simple Forum Discussion System 1.0 is affected by CVE-2025-10790. The vulnerability resides in /ajax.php?action=save_category, where manipulating the Description parameter leads to SQL injection. Exploitation can be carried out remotely, and multiple connected sources confirm the e...

CVE-2025-10789

CVE-2025-10789 affects SourceCodester Online Hotel Reservation System 1.0, specifically the deleteslide.php file. The issue arises from manipulating the ID parameter, which leads to a SQL injection vulnerability. Remote exploitation is possible, and publicly available exploits exist. Multiple con...

CVE-2025-10789 SourceCodester Online Hotel Reservation System deleteslide.php sql injection

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

CVE-2025-10788

SourceCodester Online Hotel Reservation System 1.0 contains a SQL injection vulnerability in an unknown function within deleteroominventory.php accessed by manipulating the ID parameter. The issue can be exploited remotely and has publicly disclosed exploits; multiple vendors and CVE records refe...

CVE-2025-10786

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

CVE-2025-10785 Campcodes Grocery Sales and Inventory System manage_user.php sql injection

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manageuser.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

CVE-2025-10785

Campcodes Grocery Sales and Inventory System 1.0 contains a SQL injection in /manage_user.php via manipulation of the ID parameter. The issue is exploitable remotely, and public exploits are available. Multiple sources (NVD, Red Hat, CVE listings, and third-party databases) consistently describe ...

CVE-2025-10784 Campcodes Online Learning Management System edit_subject.php sql injection

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

CVE-2025-10782 Campcodes Online Learning Management System class.php sql injection

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10781

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editclass.php. Such manipulation of the argument classname leads to sql injection. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2025-10781

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editclass.php. Such manipulation of the argument classname leads to sql injection. The attack can be executed remotely. The exploit is publicly available and migh...

Code-Projects Hostel Management System SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter ID in file /justines/admin/modreservation/index.php?view=view. An attacker can...

PT-2025-38687

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A security issue exists in Campcodes Online Learning Management System. The manipulation of the subject code argument in the /admin/edit subject.php file leads to SQL...

PT-2025-38693

Name of the Vulnerable Software and Affected Versions Campcodes Grocery Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Grocery Sales and Inventory System 1.0. The vulnerability is due to SQL injection within unknown code in the file /ajax.php?action=delete user...

SourceCodester Pet Grooming Management Software SQL Injection Vulnerability

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. SourceCodester Pet Grooming Management Software version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

CampCodes Online Learning Management System security vulnerabilities

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in Campcodes Online Learning Management System version 1.0, which stems from the incorrect manipulation of the parameter subjectcode in the file...

CampCodes Online Beauty Parlor Management System SQL Injection Vulnerability

CampCodes Online Beauty Parlor Management System is an online beauty parlor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Beauty Parlor Management System version 1.0, which stems from an incorrect manipulation of the parameter mobilenum in...