31334 matches found
CVE-2025-11445
Kilo Code up to 4.86.0 is affected by an injection vulnerability in the ClineProvider function of src/core/webview/ClineProvider.ts within the Prompt Handler component. The issue allows remote manipulation and has publicly disclosed exploits; remediation is to apply the patch. The available docum...
CVE-2025-11445 Kilo Code Prompt ClineProvider.ts ClineProvider injection
A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...
PT-2025-41249
Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves the manipulation of the ID argument in the /edit room.php file, leading to a SQL...
PT-2025-41224
Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A SQL injection issue exists in itsourcecode Leave Management System version 1.0. The issue is related to the manipulation of the employid argument in the /reset.php file. This...
PT-2025-41248
Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0 that allows for SQL injection. The issue is located in the file /edit customer.php and involves the ...
Melis Platform SQL注入漏洞
Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A SQL injection vulnerability exists in Melis platform, which stems from insufficient validation of the idPage parameter and could lead to a SQL injection attack...
Kilo Code 安全漏洞
Kilo Code is an AI coding assistant open-sourced by Kilo Code. A security vulnerability exists in Kilo Code 4.86.0 and earlier versions, which stems from improper manipulation of the ClineProvider function in the Prompt Handler component, which could lead to an injection attack...
SourceCodester Simple E-Commerce Bookstore SQL注入漏洞
SourceCodester Simple E-Commerce Bookstore is SourceCodester open source a simple e-commerce bookstore . SourceCodester Simple E-Commerce Bookstore version 1.0 has a SQL injection vulnerability, the vulnerability stems from the wrong operation of the parameter loginusername in the file /index.php...
SourceCodester Hotel and Lodge Management System SQL注入漏洞
SourceCodester Hotel and Lodge Management System is a SourceCodester open source hotel and lodge management system. A SQL injection vulnerability exists in SourceCodester Hotel and Lodge Management System version 1.0, which stems from an incorrect manipulation of the parameter Contact in the file...
SourceCodester Farm Management System SQL注入漏洞
SourceCodester Farm Management System is a SourceCodester open source farm management system. A SQL injection vulnerability exists in SourceCodester Farm Management System version 1.0, which stems from an incorrect manipulation of the parameter Name in the file /buyNow.php, which could lead to a...
CVE-2025-11409 Campcodes Advanced Online Voting Management System index.php sql injection
A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now...
CVE-2025-11405
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2025-11405 SourceCodester Hotel and Lodge Management System del_tax.php sql injection
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2025-43906
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...
EUVD-2025-32730
A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this issue is some unknown functionality of the file /delbooking.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has...
django: Django SQL injection in FilteredRelation column aliases
An SQL injection flaw has been discovered in the Django web framework. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...
EUVD-2025-32874
A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
CVE-2025-11358
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and...
CVE-2025-11314
A vulnerability has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected is the function findRolePage of the file findSingConfigPage.do. Such manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...