Lucene search
+L

364 matches found

EUVD
EUVD
•added 2025/11/10 3:32 a.m.•13 views

EUVD-2025-41749

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

7.5CVSS6.4AI score0.00441EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•0 views

CVE-2025-12929: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

9.8CVSS5.5AI score0.00441EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/10 12:00 a.m.•16 views

SourceCodester Survey Application System 安全漏洞

SourceCodester Survey Application System is an open source survey application system from SourceCodester. A security vulnerability exists in SourceCodester Survey Application System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /LoginRegistration.ph...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/10/31 12:00 a.m.•13 views

Online Event Judging System add_judge.php File SQL Injection Vulnerability

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addjudge.php. The vulnerability can be...

8.8CVSS7.1AI score0.00306EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 7:53 p.m.•14 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS5.4AI score0.00241EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 9:51 a.m.•21 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS6.4AI score0.00306EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 9:51 a.m.•26 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/27 8:15 p.m.•14 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS4.2AI score0.00241EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 7:32 p.m.•35 views

CVE-2025-12312

CVE-2025-12312 affects PHPGurukul Curfew e-Pass Management System 1.0. The vulnerability is in the file view-pass-detail.php, where manipulating the Fullname/Category argument leads to cross-site scripting. The issue can be exploited remotely; multiple sources note that an exploit has been publis...

4.8CVSS3.3AI score0.00241EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/27 7:32 p.m.•32 views

CVE-2025-12312 PHPGurukul Curfew e-Pass Management System view-pass-detail.php cross site scripting

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS0.00241EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 9:15 a.m.•20 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS0.00306EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 9:15 a.m.•12 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS0.00306EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/27 9:15 a.m.•12 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS5.7AI score0.00306EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 9:02 a.m.•13 views

EUVD-2025-36139

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

6.5CVSS6.3AI score0.00306EPSS
SaveExploits1References7
CVE
CVE
•added 2025/10/27 9:02 a.m.•24 views

CVE-2025-12255

CVE-2025-12255 affects code-projects Online Event Judging System 1.0. A SQL injection flaw originates from the lack of validation of the fullname parameter in /add_contestant.php. The vulnerability allows remote execution of arbitrary SQL commands and may lead to data theft or modification; an ex...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/10/27 9:02 a.m.•29 views

CVE-2025-12254

The CVE-2025-12254 entry concerns code-projects Online Event Judging System 1.0, with a SQL injection vulnerability in the add_judge.php handler caused by unsanitized input through the fullname parameter. Multiple connected sources describe this flaw as allowing remote exploitation to execute arb...

8.8CVSS6.8AI score0.00306EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/27 9:02 a.m.•5 views

CVE-2025-12254 code-projects Online Event Judging System add_judge.php sql injection

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•20 views

PT-2025-43913

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0 Description A flaw exists in code-projects Online Event Judging System that allows for SQL injection. This issue is related to the /add judge.php file and manipulation of the fullname...

8.8CVSS6.9AI score0.00306EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•14 views

PT-2025-43914

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0 Description A security flaw exists in code-projects Online Event Judging System 1.0. Manipulation of the fullname argument in the /add contestant.php file can lead to SQL injection. Remote...

8.8CVSS7.1AI score0.00306EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•14 views

Code-Projects Online Event Judging System SQL注入漏洞

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addjudge.php. The vulnerability can be...

8.8CVSS8.2AI score0.00306EPSS
SaveExploits1References5
Rows per page
Query Builder