Lucene search
+L

31535 matches found

CNVD
CNVD
•added 2025/12/30 12:00 a.m.•30 views

WordPress AutomatorWP plugin SQL injection vulnerability

WordPress AutomatorWP plugin is an open source automation plugin designed for WordPress that allows users to connect different WordPress plugins, sites and applications in a code-free way to create automated workflows. WordPress AutomatorWP plugin suffers from a SQL injection vulnerability that...

7.6CVSS6.1AI score0.00269EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•23 views

PT-2025-54226

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A flaw exists in itsourcecode Society Management System version 1.0 that allows for SQL injection. The issue is located in the file /admin/add admin.php within an unknown function...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•19 views

Composer injection vulnerability

Composer is a Composer open source application. Provides a declaration, management and installation of PHP project dependencies. An injection vulnerability exists in Composer versions prior to 2.2.26 and prior to 2.9.3, which stems from the possibility that an attacker could inject ANSI control...

5.3CVSS5.3AI score0.00453EPSS
SaveExploits0References5
CVE
CVE
•added 2025/12/30 12:00 a.m.•44 views

CVE-2025-66823

CVE-2025-66823 describes an HTML injection vulnerability in TrueConf Server 5.5.2.10813 in the conference description field. The issue allows an attacker to inject arbitrary HTML in Create/Edit conference functionality, with execution when the victim views the Conference Info page. Affected compo...

5.4CVSS5.5AI score0.00193EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•15 views

WordPress plugin BWL Pro Voting Manager has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

8.5CVSS5.8AI score0.003EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/29 11:15 p.m.•22 views

CVE-2025-15208

A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/editrefugee.php. The manipulation of the argument rfid results in sql injection. The attack can be launched remotely. The exploit has bee...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/29 11:02 p.m.•10 views

CVE-2025-15209 code-projects Refugee Food Management System editfood.php sql injection

A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown part of the file /home/editfood.php. This manipulation of the argument a/b/c/d causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public...

6.5CVSS6.5AI score0.00367EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/12/29 9:15 p.m.•21 views

CVE-2025-15205

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

8.8CVSS6.5AI score0.00351EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/29 9:02 p.m.•9 views

CVE-2025-15205 code-projects Student File Management System download.php sql injection

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

6.5CVSS6.5AI score0.00351EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/29 6:15 p.m.•18 views

CVE-2025-15198

A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing a manipulation of the argument User can lead to sql injection. The attack may be launched remotely. The exploit has been made available ...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/29 6:15 p.m.•24 views

CVE-2025-15198

A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing a manipulation of the argument User can lead to sql injection. The attack may be launched remotely. The exploit has been made available ...

9.8CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/29 4:02 p.m.•29 views

CVE-2025-15195

Code-Projects Assessment Management 1.0 is affected. The vulnerability lies in /admin/add-module.php where manipulating the linked[] parameter enables SQL injection. The issue can be exploited remotely and exploits have been publicly disclosed. Multiple sources corroborate the SQLi risk and remot...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/12/29 12:15 p.m.•19 views

CVE-2025-15186

A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/29 11:32 a.m.•16 views

CVE-2025-15186 code-projects Refugee Food Management System addusers.php sql injection

A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/12/29 3:15 a.m.•21 views

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/29 3:15 a.m.•28 views

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS0.00383EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•20 views

Code-Projects Refugee Food Management System SQL Injection Vulnerability

Code-Projects Refugee Food Management System is an open source refugee food management system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Refugee Food Management System version 1.0, which stems from an incorrect manipulation of the parameter a in the file...

9.8CVSS7.1AI score0.00374EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•21 views

Itsourcecode Student Management System security vulnerabilities

itsourcecode Student Management System is an open source student management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter ID in the file /statistical.php, which may le...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•26 views

PT-2025-53769

Name of the Vulnerable Software and Affected Versions College Notes Uploading System version 1.0 Description A weakness exists in the College Notes Uploading System. The issue relates to the processing of the /login.php file. Manipulation of the User argument can lead to SQL injection. The attack...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•29 views

PT-2025-53756

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description A flaw exists in code-projects Assessment Management 1.0, specifically within the file login.php. Manipulation of the userid argument can lead to SQL injection. This issue is remotely...

9.8CVSS7.3AI score0.00427EPSS
SaveExploits1References11
Rows per page
Query Builder