Lucene search
+L

1080 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•2 views

CVE-2025-14619: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file loginquery.php. Performing manipulation of the argument studno results in sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.6AI score0.00518EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•18 views

PT-2025-51130

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A security flaw exists in code-projects Student File Management System 1.0. The issue affects unknown code within the file /admin/save user.php. Manipulation of the firstname...

7.5CVSS7.4AI score0.00415EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•15 views

PT-2025-51131

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A weakness exists in the processing of the /admin/update student.php file within the software. Manipulation of the stud id argument can lead to a SQL injection. This issue is...

7.5CVSS7.5AI score0.00415EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•19 views

Code-Projects Student File Management System SQL注入漏洞

Student File Management System is a student file management system. The Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter studentid in the file /admin/updatestudent.php. An...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•5 views

CVE-2025-14621: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument userid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•3 views

CVE-2025-14622: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/saveuser.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•21 views

PT-2025-51129

Name of the Vulnerable Software and Affected Versions Student File Management System version 1.0 Description A flaw exists in Student File Management System version 1.0 where manipulation of the user id argument in the file '/admin/update user.php' can lead to SQL injection. Remote exploitation i...

9.8CVSS7.5AI score0.00387EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•16 views

code-projects Student File Management System SQL注入漏洞

Student File Management System is a student file management system. The Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in the file /admin/loginquery.php. An...

9.8CVSS7.8AI score0.00518EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•1 views

CVE-2025-14623: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•2 views

CVE-2025-14620: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/loginquery.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit h...

9.8CVSS5.6AI score0.00518EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/10 12:00 a.m.•21 views

Huawei HarmonyOS file management app bypasses app lock checksum vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A vulnerability exists in the Huawei HarmonyOS file management app that bypasses the application lock checksum and can be exploited by an attacker to...

5.5CVSS6.7AI score0.00092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 9:33 a.m.•26 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 2:17 a.m.•23 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/08 9:15 a.m.•19 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 9:15 a.m.•15 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS0.00092EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/08 8:34 a.m.•31 views

CVE-2025-66330

CVE-2025-66330 affects Huawei HarmonyOS’s file management app, causing a bypass of the app lock verification/checksum and potentially compromising service confidentiality. Documents consistently describe a lock-check bypass without listing specific vulnerable versions, exploit details, or remedia...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/12/08 8:34 a.m.•49 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

4.9CVSS0.00092EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/08 8:34 a.m.•17 views

EUVD-2025-201673

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS6.3AI score0.00092EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/08 8:34 a.m.•8 views

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

4.9CVSS5.8AI score0.00092EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/08 2:15 a.m.•25 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Rows per page
Query Builder