Lucene search
+L

321 matches found

RedhatCVE
RedhatCVE
added 2025/10/28 9:51 a.m.10 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS6.4AI score0.00299EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/27 8:15 p.m.7 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS4.2AI score0.00237EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 7:32 p.m.19 views

CVE-2025-12312

CVE-2025-12312 affects PHPGurukul Curfew e-Pass Management System 1.0. The vulnerability is in the file view-pass-detail.php, where manipulating the Fullname/Category argument leads to cross-site scripting. The issue can be exploited remotely; multiple sources note that an exploit has been publis...

4.8CVSS3.3AI score0.00237EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 7:32 p.m.18 views

CVE-2025-12312 PHPGurukul Curfew e-Pass Management System view-pass-detail.php cross site scripting

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS0.00237EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/27 9:15 a.m.6 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS5.7AI score0.00299EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 a.m.11 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS0.00299EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 a.m.6 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS0.00299EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 9:2 a.m.12 views

CVE-2025-12255

CVE-2025-12255 affects code-projects Online Event Judging System 1.0. A SQL injection flaw originates from the lack of validation of the fullname parameter in /add_contestant.php. The vulnerability allows remote execution of arbitrary SQL commands and may lead to data theft or modification; an ex...

8.8CVSS6.5AI score0.00299EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/10/27 9:2 a.m.7 views

EUVD-2025-36139

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

6.5CVSS6.3AI score0.00299EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2025/10/27 9:2 a.m.3 views

CVE-2025-12254 code-projects Online Event Judging System add_judge.php sql injection

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

6.5CVSS6.4AI score0.00299EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 9:2 a.m.18 views

CVE-2025-12254

The CVE-2025-12254 entry concerns code-projects Online Event Judging System 1.0, with a SQL injection vulnerability in the add_judge.php handler caused by unsanitized input through the fullname parameter. Multiple connected sources describe this flaw as allowing remote exploitation to execute arb...

8.8CVSS6.8AI score0.00299EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.9 views

Code-Projects Online Event Judging System SQL注入漏洞

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addjudge.php. The vulnerability can be...

8.8CVSS8.2AI score0.00299EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.14 views

PT-2025-44024

Name of the Vulnerable Software and Affected Versions PHPGurukul Curfew e-Pass Management System version 1.0 Description A flaw exists in PHPGurukul Curfew e-Pass Management System 1.0. The issue involves the manipulation of the Fullname/Category argument in the view-pass-detail.php file, leading...

4.8CVSS2.7AI score0.00237EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.12 views

PT-2025-43913

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0 Description A flaw exists in code-projects Online Event Judging System that allows for SQL injection. This issue is related to the /add judge.php file and manipulation of the fullname...

8.8CVSS6.9AI score0.00299EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.5 views

Code-Projects Online Event Judging System SQL注入漏洞

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addcontestant.php. An attacker can exploi...

8.8CVSS8.2AI score0.00299EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.8 views

PT-2025-43914

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0 Description A security flaw exists in code-projects Online Event Judging System 1.0. Manipulation of the fullname argument in the /add contestant.php file can lead to SQL injection. Remote...

8.8CVSS7.1AI score0.00299EPSS
SaveExploits1References9
CNVD
CNVD
added 2025/10/13 12:0 a.m.7 views

Online Shopping Portal Project login.php File SQL Injection Vulnerability

Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /shopping/login.php. An attacker...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/11 10:5 p.m.8 views

CVE-2025-11588

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

8.8CVSS7AI score0.00311EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/11 12:30 a.m.8 views

EUVD-2025-33783

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.00311EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/10 10:15 p.m.6 views

CVE-2025-11588

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

8.8CVSS5.8AI score0.00311EPSS
SaveExploits1References5
Rows per page
Query Builder