Lucene search
+L

331 matches found

OSV
OSV
added 2025/11/10 4:15 a.m.5 views

CVE-2025-12929

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

9.8CVSS5.8AI score0.00441EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/10 4:15 a.m.23 views

CVE-2025-12929

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

9.8CVSS0.00441EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/10 3:32 a.m.6 views

CVE-2025-12929 SourceCodester Survey Application System LoginRegistration.php update_user sql injection

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

7.5CVSS7.1AI score0.00441EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/10 3:32 a.m.25 views

CVE-2025-12929 SourceCodester Survey Application System LoginRegistration.php update_user sql injection

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

7.5CVSS0.00441EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/10 3:32 a.m.12 views

EUVD-2025-41749

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

7.5CVSS6.4AI score0.00441EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/10 12:00 a.m.13 views

SourceCodester Survey Application System 安全漏洞

SourceCodester Survey Application System is an open source survey application system from SourceCodester. A security vulnerability exists in SourceCodester Survey Application System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /LoginRegistration.ph...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits1References5
CNVD
CNVD
added 2025/10/31 12:00 a.m.11 views

Online Event Judging System add_judge.php File SQL Injection Vulnerability

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addjudge.php. The vulnerability can be...

8.8CVSS7.1AI score0.00306EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 7:53 p.m.12 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS5.4AI score0.00241EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 9:51 a.m.18 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS6.4AI score0.00306EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 9:51 a.m.23 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/27 8:15 p.m.12 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS4.2AI score0.00241EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 7:32 p.m.28 views

CVE-2025-12312

CVE-2025-12312 affects PHPGurukul Curfew e-Pass Management System 1.0. The vulnerability is in the file view-pass-detail.php, where manipulating the Fullname/Category argument leads to cross-site scripting. The issue can be exploited remotely; multiple sources note that an exploit has been publis...

4.8CVSS3.3AI score0.00241EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 7:32 p.m.29 views

CVE-2025-12312 PHPGurukul Curfew e-Pass Management System view-pass-detail.php cross site scripting

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS0.00241EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 a.m.17 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS0.00306EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 a.m.10 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS0.00306EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/27 9:15 a.m.9 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS5.7AI score0.00306EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/27 9:02 a.m.11 views

EUVD-2025-36139

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

6.5CVSS6.3AI score0.00306EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/27 9:02 a.m.18 views

CVE-2025-12255

CVE-2025-12255 affects code-projects Online Event Judging System 1.0. A SQL injection flaw originates from the lack of validation of the fullname parameter in /add_contestant.php. The vulnerability allows remote execution of arbitrary SQL commands and may lead to data theft or modification; an ex...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2025/10/27 9:02 a.m.23 views

CVE-2025-12254

The CVE-2025-12254 entry concerns code-projects Online Event Judging System 1.0, with a SQL injection vulnerability in the add_judge.php handler caused by unsanitized input through the fullname parameter. Multiple connected sources describe this flaw as allowing remote exploitation to execute arb...

8.8CVSS6.8AI score0.00306EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 9:02 a.m.4 views

CVE-2025-12254 code-projects Online Event Judging System add_judge.php sql injection

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits1References5
Rows per page
Query Builder