Lucene search
+L

1367 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/29 12:00 a.m.•6 views

CVE-2025-6840: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Product Inventory System 1.0. This affects an unknown part of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/23 8:39 a.m.•20 views

CVE-2025-6314

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/catupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS7.7AI score0.00469EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/23 8:39 a.m.•16 views

CVE-2025-6312

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cashtransaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7.9AI score0.00463EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/23 8:39 a.m.•16 views

CVE-2025-6313

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/catadd.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.7AI score0.00463EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/23 8:39 a.m.•18 views

CVE-2025-6311

A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/accountadd.php. The manipulation of the argument id/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS7.7AI score0.00481EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/06/23 3:15 a.m.•20 views

CVE-2025-6500

A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /phpaction/editCategories.php. The manipulation of the argument editCategoriesName leads to sql injection. The attac...

9.8CVSS6.8AI score0.00487EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/23 12:00 a.m.•12 views

Code-Projects Inventory Management System security vulnerabilities

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the categoriesStatus parameter of the /phpaction/createCategories.php file. An...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits1References6
NVD
NVD
•added 2025/06/20 7:15 a.m.•42 views

CVE-2025-6314

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/catupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS0.00469EPSS
SaveExploits1References5
NVD
NVD
•added 2025/06/20 7:15 a.m.•19 views

CVE-2025-6313

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/catadd.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00463EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/20 6:31 a.m.•13 views

CVE-2025-6314 Campcodes Sales and Inventory System cat_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/catupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

7.5CVSS7.6AI score0.00469EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/20 6:31 a.m.•53 views

CVE-2025-6314

CVE-2025-6314 affects Campcodes Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file /pages/cat_update.php triggered by manipulating the ID parameter. Exploitation is remote, and public exploits are reported. Product details in the connected docs consistently point to...

9.8CVSS6.9AI score0.00469EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/06/20 6:31 a.m.•33 views

CVE-2025-6314 Campcodes Sales and Inventory System cat_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/catupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

7.5CVSS0.00469EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/20 6:31 a.m.•12 views

CVE-2025-6313 Campcodes Sales and Inventory System cat_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/catadd.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS7.6AI score0.00463EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/20 6:31 a.m.•31 views

CVE-2025-6313 Campcodes Sales and Inventory System cat_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/catadd.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00463EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/20 6:31 a.m.•56 views

CVE-2025-6313

CVE-2025-6313 affects Campcodes Sales and Inventory System 1.0. A vulnerability in /pages/cat_add.php allows SQL injection via the Category parameter. It is remotely exploitable, with public disclosure of the exploit. Multiple sources confirm impact and configuration details but do not provide a ...

9.8CVSS7AI score0.00463EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/06/20 6:15 a.m.•21 views

CVE-2025-6312

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cashtransaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS0.00463EPSS
SaveExploits1References5
NVD
NVD
•added 2025/06/20 6:15 a.m.•33 views

CVE-2025-6311

A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/accountadd.php. The manipulation of the argument id/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS0.00481EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/06/20 6:00 a.m.•11 views

CVE-2025-6312 Campcodes Sales and Inventory System cash_transaction.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cashtransaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS7.8AI score0.00463EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/20 6:00 a.m.•47 views

CVE-2025-6312 Campcodes Sales and Inventory System cash_transaction.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cashtransaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS0.00463EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/20 6:00 a.m.•51 views

CVE-2025-6312

CVE-2025-6312 affects Campcodes Sales and Inventory System v1.0, with SQL injection in /pages/cash_transaction.php via the cid parameter. The vulnerability is exploitable remotely and exploits have been disclosed publicly. Multiple sources (including Red Hat and PT Security) indicate a lack of a ...

9.8CVSS7AI score0.00463EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder