663 matches found
CVE-2025-12256 code-projects Online Event Judging System edit_contestant.php sql injection
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /editcontestant.php. Executing manipulation of the argument contestantid can lead to sql injection. The attack can be executed remotely. The exploit has been made...
PT-2025-43154
Name of the Vulnerable Software and Affected Versions Alexander AnyComment versions through 0.3.6 Description A flaw exists in Alexander AnyComment that allows for SQL Injection. The issue is due to improper neutralization of special elements used in an SQL command. This could allow an attacker t...
CVE-2025-8052
SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2...
Toeverything AFFiNE 代码注入漏洞
Toeverything AFFiNE is a knowledge management software from Toeverything open source. AFFiNE 0.24.1 and earlier versions suffer from a code injection vulnerability that stems from an unknown code flaw in the Avatar Upload Image Endpoint component, which could lead to a cross-site scripting attack...
ChanCMS SQL注入漏洞
ChanCMS is a content management system. A SQL injection vulnerability exists in ChanCMS 3.3.2 and earlier versions, which originates from the lack of validation of the parameter cid in the file /cms/article/update for externally entered SQL statements. An attacker can exploit this vulnerability t...
FreePBX Endpoint Manager SQL注入漏洞
FreePBX Endpoint Manager is a centralized IP phone endpoint configuration module from FreePBX open source. An SQL injection vulnerability exists in FreePBX Endpoint Manager versions prior to 16.0.92 and 17.0.6. The vulnerability stems from an SQL injection vulnerability in multiple parameters in...
PT-2025-41831
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remote authenticated attacker can potentially read arbitrary data from the database. The issue allows for unauthoriz...
MxsDoc SQL注入漏洞
MxsDoc is a Web-based document management system from Rainy Open Source. A SQL injection vulnerability exists in MxsDoc 2.02.36 and earlier versions, which stems from an incorrect operation of the function getUserList in the file /Manage/getUserList.do, which could lead to a SQL injection attack...
CVE-2025-11424
A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...
EUVD-2008-4876
Malware in sbrugna...
EUVD-2020-18482
Malware in sbrugna...
EUVD-2010-4817
Malware in sbrugna...
EUVD-2019-17783
Malware in sbrugna...
EUVD-2016-6347
Malware in sbrugna...
EUVD-2020-23399
Malware in sbrugna...
EUVD-2019-3293
Malware in sbrugna...
EUVD-2021-21077
Malware in sbrugna...
EUVD-2021-26833
Malware in sbrugna...