Lucene search
+L

1168 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•7 views

CVE-2025-14623: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

9.8CVSS7.1AI score0.00415EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•6 views

CVE-2025-14619: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file loginquery.php. Performing manipulation of the argument studno results in sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.1AI score0.00518EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•8 views

CVE-2025-14621: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument userid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•8 views

CVE-2025-14620: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/loginquery.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit h...

9.8CVSS7.1AI score0.00518EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•20 views

Code-Projects Student File Management System SQL Injection Vulnerability

Student File Management System is a student file management system. The Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter firstname in the file /admin/saveuser.php. An...

9.8CVSS7.4AI score0.00415EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•23 views

Code-Projects Student File Management System SQL Injection Vulnerability

Student File Management System is a student file management system. The Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in the file /admin/loginquery.php. An...

9.8CVSS7.4AI score0.00518EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•21 views

PT-2025-51128

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/login query.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7.1AI score0.00518EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•21 views

Code-Projects Student File Management System SQL Injection Vulnerability

Student File Management System is a student file management system. A SQL injection vulnerability exists in Student File Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /admin/updateuser.php. An attacker ca...

9.8CVSS7.4AI score0.00387EPSS
SaveExploits1References6
CNVD
CNVD
•added 2025/12/10 12:00 a.m.•27 views

Huawei HarmonyOS file management app bypasses app lock checksum vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A vulnerability exists in the Huawei HarmonyOS file management app that bypasses the application lock checksum and can be exploited by an attacker to...

5.5CVSS5.9AI score0.00092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 9:33 a.m.•29 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.9AI score0.00092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 2:17 a.m.•29 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/08 9:15 a.m.•21 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS0.00092EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/08 9:15 a.m.•25 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.9AI score0.00092EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/08 8:34 a.m.•56 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

4.9CVSS0.00092EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/08 8:34 a.m.•13 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

4.9CVSS5.9AI score0.00092EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/08 8:34 a.m.•22 views

EUVD-2025-201673

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.9AI score0.00092EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/08 8:34 a.m.•38 views

CVE-2025-66330

CVE-2025-66330 affects Huawei HarmonyOS’s file management app, causing a bypass of the app lock verification/checksum and potentially compromising service confidentiality. Documents consistently describe a lock-check bypass without listing specific vulnerable versions, exploit details, or remedia...

5.5CVSS5.9AI score0.00092EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2025/12/08 2:15 a.m.•34 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/08 2:15 a.m.•26 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS0.00387EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/12/08 1:32 a.m.•14 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder