Code-Projects Kitchen Treasure 注入漏洞

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. An injection vulnerability exists in code-projects Kitchen Treasure version 1.0, which results from SQL injection due to incorrect manipulation of the parameter email in the file /userregistration.php...

Online Farm System register.php File SQL Injection Vulnerability

Online Farm System is an online farm system. Online Farm System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /register.php. An attacker can exploit this vulnerability to execute...

Code-Projects Restaurant Order System 安全漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. A security vulnerability exists in Code-Projects Restaurant Order System version 1.0, which originates from a SQL injection vulnerability in the payment.php file, which may lead to the disclosure o...

CVE-2025-8381

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /addreserve.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-8345

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function deleteuser of the file crm/WeiXinApp/yunzhijia/yunzhijiaApi.php. The manipulation of the argument function leads to sql injection...

Code-Projects Intern Membership Management System 安全漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. A security vulnerability exists in code-projects Intern Membership Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the paramete...

Kimai 安全漏洞

kimai is a web-based multi-user time tracking application from the individual developer of kimai. A security vulnerability exists in version 0.9.2.x of Kimai, which stems from unvalidated dates POST parameters and could lead to SQL injection and remote code execution...

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates7.php. An attacker can exploit this vulnerability to execute illegal SQL...

CVE-2025-8332

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8326

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/deletes7.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

Campcodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which is caused by an incorrect manipulation of the parameter ID in the file /admin/ajax.p...

Exam Form Submission update_s3.php File SQL Injection Vulnerability

Exam Form Submission is an exam form. Exam Form Submission has a SQL injection vulnerability that stems from improper handling of the credits parameter in the /admin/updates3.php file. No details of the vulnerability are provided at this time...

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter USN in the file /register.php. An attacker can exploit this vulnerability to execute illegal SQL...

code-projects Online Farm System 安全漏洞

Online Farm System is an online farm system. Online Farm System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /forgotpass.php. An attacker can exploit this vulnerability to execute illeg...

Rocket Software Rocket Zena 安全漏洞

Rocket Software Rocket Zena is a workload automation software from Rocket Software, USA. A security vulnerability exists in Rocket Software Rocket Zena version 4.4.1.26, which stems from improper handling of the filter parameter and can lead to SQL injection attacks...

Code-Projects Vehicle Management 注入漏洞

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter sno in the file /edit1.php. An attacker can exploit this vulnerability to execute illegal S...

Code-Projects Vehicle Management 注入漏洞

Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...

Exploit for SQL Injection in Piwigo

CVE-2024-43018 - x Assign an ID - Be officially populate...

Genetec Security Center 安全漏洞

Genetec Security Center is a unified security platform from Genetec. Connect your security systems, sensors and data in one interface to streamline your operations. Genetec Security Center has a security vulnerability that stems from the Archiver role being vulnerable to SQL injection attacks...

📄 XWiki 14 SQL Injection

XWiki version 14 suffers from a remote blind SQL injection vulnerability in getdeleteddocuments.vm. Exploit Title: XWiki 14 - SQL Injection via getdeleteddocuments.vm Google Dork: N/A Date: 28 July 2025 Exploit Author: Byte Reaper LinkedIn: N/A Vendor Homepage: https://www.xwiki.org Software Link...