Code-Projects Online Medicine Guide 注入漏洞

Code-Projects Online Medicine Guide is a Code-Projects open source online medicine guide. An injection vulnerability exists in Code-Projects Online Medicine Guide version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter mname in the file /adaddmed.php...

CVE-2025-8470

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/deleteroom.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-8468

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-8467

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

CVE-2025-8466

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgotpassfarmer.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

Projectworlds Online Admission System 注入漏洞

Projectworlds Online Admission System is an online admission system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Admission System version 1.0, which stems from an incorrect manipulation of the parameter aid in the file /adminlogin.php resulting in SQL...

Exam Form Submission delete_s8.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes8.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

TESI Gandia Integra Total SQL注入漏洞

TESI Gandia Integra Total is a Web-based online survey and data analysis system from TESI Spain. An SQL injection vulnerability exists in TESI Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1, which originates in the file /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php...

Code-Projects Restaurant Order System 安全漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. A security vulnerability exists in Code-Projects Restaurant Order System version 1.0, which originates from a SQL injection vulnerability in the payment.php file, which may lead to the disclosure o...

Code-Projects Kitchen Treasure 注入漏洞

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. An injection vulnerability exists in code-projects Kitchen Treasure version 1.0, which results from SQL injection due to incorrect manipulation of the parameter email in the file /userregistration.php...

Online Farm System register.php File SQL Injection Vulnerability

Online Farm System is an online farm system. Online Farm System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /register.php. An attacker can exploit this vulnerability to execute...

CVE-2025-8381

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /addreserve.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-8345

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function deleteuser of the file crm/WeiXinApp/yunzhijia/yunzhijiaApi.php. The manipulation of the argument function leads to sql injection...

Code-Projects Intern Membership Management System 安全漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. A security vulnerability exists in code-projects Intern Membership Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the paramete...

Kimai 安全漏洞

kimai is a web-based multi-user time tracking application from the individual developer of kimai. A security vulnerability exists in version 0.9.2.x of Kimai, which stems from unvalidated dates POST parameters and could lead to SQL injection and remote code execution...

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates7.php. An attacker can exploit this vulnerability to execute illegal SQL...

CVE-2025-8332

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8326

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/deletes7.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

Campcodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which is caused by an incorrect manipulation of the parameter ID in the file /admin/ajax.p...

Exam Form Submission update_s3.php File SQL Injection Vulnerability

Exam Form Submission is an exam form. Exam Form Submission has a SQL injection vulnerability that stems from improper handling of the credits parameter in the /admin/updates3.php file. No details of the vulnerability are provided at this time...