Lucene search
K

933 matches found

Cvelist
Cvelist
added 2025/12/14 1:32 p.m.19 views

CVE-2025-14662 code-projects Student File Management System Update User update_user.php cross site scripting

A vulnerability was found in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/updateuser.php of the component Update User Page. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been made...

4.8CVSS0.00193EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/14 6:30 a.m.4 views

EUVD-2025-203283

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/deleteuser.php. The manipulation of the argument userid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...

7.5CVSS6.6AI score0.00357EPSS
Exploits1References7
EUVD
EUVD
added 2025/12/14 6:30 a.m.4 views

EUVD-2025-203285

A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/deletestudent.php. The manipulation of the argument studid results in sql injection. The attack may be performed from remote. The exploit has been released ...

7.5CVSS7.2AI score0.00357EPSS
Exploits1References8
OSV
OSV
added 2025/12/14 6:15 a.m.4 views

CVE-2025-14646

A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/deletestudent.php. The manipulation of the argument studid results in sql injection. The attack may be performed from remote. The exploit has been released ...

9.8CVSS6.8AI score0.00357EPSS
Exploits1References6
OSV
OSV
added 2025/12/14 6:15 a.m.2 views

CVE-2025-14645

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/deleteuser.php. The manipulation of the argument userid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...

9.8CVSS5.7AI score
Exploits0References6
NVD
NVD
added 2025/12/14 6:15 a.m.6 views

CVE-2025-14645

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/deleteuser.php. The manipulation of the argument userid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...

9.8CVSS0.00357EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/14 6:2 a.m.2 views

CVE-2025-14646 code-projects Student File Management System delete_student.php sql injection

A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/deletestudent.php. The manipulation of the argument studid results in sql injection. The attack may be performed from remote. The exploit has been released ...

7.5CVSS6.5AI score0.00357EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/14 5:32 a.m.22 views

CVE-2025-14645 code-projects Student File Management System delete_user.php sql injection

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/deleteuser.php. The manipulation of the argument userid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...

7.5CVSS0.00357EPSS
Exploits1References6
CVE
CVE
added 2025/12/14 5:32 a.m.17 views

CVE-2025-14645

CVE-2025-14645 affects code-projects Student File Management System 1.0. The vulnerability resides in the /admin/delete_user.php function where manipulating the user_id parameter allows SQL injection. Several connected sources confirm remote exploitation with a publicly available exploit, and mul...

9.8CVSS6.8AI score0.00357EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/14 5:32 a.m.3 views

CVE-2025-14645 code-projects Student File Management System delete_user.php sql injection

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/deleteuser.php. The manipulation of the argument userid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...

7.5CVSS6.8AI score0.00357EPSS
Exploits1References6
EUVD
EUVD
added 2025/12/14 3:30 a.m.3 views

EUVD-2025-203275

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

7.5CVSS6.5AI score0.00357EPSS
Exploits1References7
OSV
OSV
added 2025/12/14 2:15 a.m.3 views

CVE-2025-14640

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

9.8CVSS5.8AI score0.00357EPSS
Exploits1References6
NVD
NVD
added 2025/12/14 2:15 a.m.8 views

CVE-2025-14640

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

9.8CVSS0.00357EPSS
Exploits1References6
CVE
CVE
added 2025/12/14 1:32 a.m.15 views

CVE-2025-14640

Affects Code-Projects Student File Management System 1.0. The vulnerability is an SQL injection in the /admin/save_student.php handler, triggered by manipulating the stud_no (or student_no) parameter due to lack of input validation. This can be exploited remotely (attack vector NETWORK) and may a...

9.8CVSS7.2AI score0.00357EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2025/12/14 1:32 a.m.19 views

CVE-2025-14640 code-projects Student File Management System save_student.php sql injection

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

7.5CVSS0.00357EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:0 a.m.9 views

PT-2025-51165

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/update student.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...

4.8CVSS5.7AI score0.00202EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:0 a.m.5 views

PT-2025-51150

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A security flaw exists in code-projects Student File Management System 1.0. The issue is related to the manipulation of the stud id argument in the file '/admin/delete...

9.8CVSS7.4AI score0.00357EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/12/14 12:0 a.m.5 views

PT-2025-51164

A vulnerability was found in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update user.php of the component Update User Page. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been mad...

4.8CVSS5.7AI score0.00193EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.2 views

Code-Projects Student File Management System SQL注入漏洞

Student File Management System is a student file management system. Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentno in the file /admin/savestudent.php. An attacker...

9.8CVSS7.9AI score0.00357EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.2 views

Code-Projects Student File Management System 代码注入漏洞

Student File Management System is a student file management system. A cross-site scripting vulnerability exists in Student File Management System, which originates from an incorrect operation of the file /admin/updateuser.php, for which no detailed vulnerability details are currently available...

5.4CVSS3.9AI score0.00193EPSS
Exploits1References6
Rows per page
Query Builder