CVE-2025-8252

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletes5.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

Projectworlds Online Admission System 注入漏洞

Projectworlds Online Admission System is an online admission system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Admission System version 1.0, which stems from an incorrect operation of the parameter markof in the file /admin.php resulting in SQL injection...

CampCodes Courier Management System 注入漏洞

CampCodes Courier Management System is a courier management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Courier Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file /viewparcel.php...

Online Ordering System user.php File SQL Injection Vulnerability

Online Ordering System is an online ordering system. Online Ordering System has a SQL injection vulnerability that originates from an unfiltered parameter un in the /admin/user.php file that allows manipulation of database queries. No details of the vulnerability are available at this time...

Ncvav Virtual PBX Software SQL注入漏洞

Ncvav Virtual PBX Software is a telephone exchange system from the Turkish company Ncvav. A SQL injection vulnerability exists in Ncvav Virtual PBX Software versions prior to 2025.07.09, which stems from improper neutralization of special elements and is susceptible to SQL injection attacks...

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes6.php...

CampCodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which is caused by SQL injection due to the manipulation of the parameter ID in the file...

Code-Projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission has a SQL injection vulnerability that stems from improper handling of the credits parameter in the /admin/updates3.php file. No details of the vulnerability are provided at this time...

CVE-2025-8241

A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /report.php. The manipulation of the argument From leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8232

A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

Code-Projects Online Ordering System 注入漏洞

Online Ordering System is an online ordering system. Online Ordering System has a SQL injection vulnerability that originates from an unfiltered parameter un in the /admin/user.php file that allows manipulation of database queries. No details of the vulnerability are available at this time...

Code-Projects Online Ordering System 注入漏洞

Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /admin/deleteuser.ph...

CVE-2025-8190

A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the file /printpdets.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-8188

A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /editstaff.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-8187

A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /editparcel.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

PHPGurukul Local Services Search Engine Management System 注入漏洞

PHPGurukul Local Services Search Engine Management System is a local services search engine management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Local Services Search Engine Management System version 2.1, which originates from an SQL injection caused by the parameter...

CVE-2025-8172

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-8124

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /system/role/authUser/unallocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack can be...

deer-wms-2 SQL注入漏洞

deer-wms-2 is an open source warehouse management system from China's deerwms. A security vulnerability exists in deer-wms-2 3.3 and earlier versions, which originates from SQL injection due to incorrect manipulation of paramsdataScope in the file /system/role/authUser/unallocatedList...

Church Donation System Tithes.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter trcode in the file /members/Tithes.php. An attacker can exploit this...