7683 matches found
CVE-2025-7595
The CVE-2025-7595 issue affects code-projects Job Diary 1.0 and is a SQL injection in the /view-cad.php file caused by manipulating the ID parameter. It can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate the vulnerability with high-impact metrics (...
CVE-2025-7594 code-projects Job Diary view-emp.php sql injection
A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-7594 code-projects Job Diary view-emp.php sql injection
A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-7594
CVE-2025-7594 affects code-projects Job Diary 1.0. The vulnerability is a SQL injection in the /view-emp.php file, caused by unsafely using the idle parameter ID without validation, enabling remote exploitation. Public disclosures indicate an attacker can run arbitrary SQL, with potential data ac...
CVE-2025-7593 code-projects Job Diary view-all.php sql injection
A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-all.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to t...
CVE-2025-7593 code-projects Job Diary view-all.php sql injection
A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-all.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to t...
CVE-2025-7593
Code-projects Job Diary 1.0 is affected by a SQL injection in /view-all.php via the ID parameter. Multiple sources (CNVD/CNNVD, Red Hat, CVE listings, and PT Security) confirm a remote-authored vulnerability with no publicly confirmed fix in the current version, and exploitation/public disclosure...
PT-2025-29448 · Code Projects · Job Diary
Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0, affecting an unknown functionality within the /view-all.php file. Manipulation of the ID argument results in a SQL injection. The attack...
PT-2025-29450 · Code Projects · Job Diary
Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0. The vulnerability affects unknown code within the /view-cad.php file. Manipulation of the ID argument can lead to SQL injection, allowing...
Job Iteration API 操作系统命令注入漏洞
Job Iteration API is an open source API interface from Shopify. An operating system command injection vulnerability exists in Job Iteration API versions prior to 1.11.0, which stems from arbitrary code execution in the CsvEnumerator class that could lead to unauthorized access or data disclosure...
Code-Projects Job Diary 注入漏洞
Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-emp.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
PT-2025-29509 · Unknown · Job Iteration Api
Name of the Vulnerable Software and Affected Versions: Job Iteration API versions prior to 1.11.0 Description: The Job Iteration API, an extension for ActiveJob, has an arbitrary code execution issue in the CsvEnumerator class. Exploitation of this issue can lead to unauthorized access, data...
Code-Projects Job Diary 安全漏洞
Code-Projects Job Diary is an open source job diary software from Code-Projects. A security vulnerability exists in Code-Projects Job Diary version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file /view-cad.php...
PT-2025-29449 · Code Projects · Job Diary
Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0. The manipulation of the ID argument in the /view-emp.php file leads to a SQL injection. The attack can be initiated remotely, and the...
Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class
Impact There is an arbitrary code execution vulnerability in the CsvEnumerator class of the job-iteration repository. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system where the application is running, potentially leading to unauthorized access, data...
CVE-2025-7533
A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument jobid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-7533
A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument jobid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-7533
CVE-2025-7533 affects code-projects Job Diary 1.0. The vulnerability is a SQL injection in /view-details.php caused by unsafely handling the job_id parameter, with remote exploitation and a publicly disclosed exploit. Various sources corroborate the issue; PT Security notes there is no informatio...
CVE-2025-7533 code-projects Job Diary view-details.php sql injection
A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument jobid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-7533 code-projects Job Diary view-details.php sql injection
A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument jobid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...