Lucene search
+L

3900 matches found

CNNVD
CNNVD
•added 2025/10/07 12:00 a.m.•21 views

SourceCodester Hotel and Lodge Management System security vulnerabilities

SourceCodester Hotel and Lodge Management System is SourceCodester open source hotel and lodge management system. A security vulnerability exists in SourceCodester Hotel and Lodge Management System version 1.0, which stems from an incorrect manipulation of the parameter email in the file login.ph...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/07 12:00 a.m.•24 views

CampCodes Online Apartment Visitor Management SQL Injection Vulnerability

CampCodes Online Apartment Visitor Management is an online apartment visitor management system from CampCodes Philippines. CampCodes Online Apartment Visitor Management version 1.0 suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter Username in th...

9.8CVSS7.7AI score0.00417EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/07 12:00 a.m.•18 views

PT-2025-41828

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows for...

6.8CVSS6.8AI score0.00823EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/10/07 12:00 a.m.•23 views

PT-2025-40987

Name of the Vulnerable Software and Affected Versions Simple Food Ordering System version 1.0 Description A SQL injection issue exists in Simple Food Ordering System version 1.0. Manipulation of the Category argument in an unknown function within the /product.php file can lead to SQL injection. T...

9.8CVSS7.7AI score0.00478EPSS
SaveExploits1References10
NVD
NVD
•added 2025/10/06 12:15 p.m.•70 views

CVE-2025-11334

A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The exploit has been released to...

9.8CVSS0.00417EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 2:02 a.m.•33 views

CVE-2025-11315

Tipray Data Leakage Prevention System 1.0 is affected. The vulnerability is in the findUserPage.do file, specifically the findUserPage function, where manipulation of the sort argument enables SQL injection. It is remotely exploitable and the exploit has been made public. The vendor was contacted...

9.8CVSS6.9AI score0.00502EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/06 1:02 a.m.•33 views

CVE-2025-11313 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findRolePage.do findRolePage sql injection

A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS0.00502EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/06 1:02 a.m.•20 views

EUVD-2025-32482

A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS6.3AI score0.00502EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•21 views

CampCodes Online Apartment Visitor Management SQL Injection Vulnerability

CampCodes Online Apartment Visitor Management is an online apartment visitor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Apartment Visitor Management version 1.0, which stems from an incorrect manipulation of the parameter editid in the...

9.8CVSS7.7AI score0.00417EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•21 views

Code-Projects Online Course Registration SQL Injection Vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/manage-students.php. An attacker can...

9.8CVSS8.2AI score0.00417EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•38 views

PT-2025-40935

Name of the Vulnerable Software and Affected Versions code-projects Online Course Registration version 1.0 Description A flaw exists in code-projects Online Course Registration 1.0 that allows for SQL injection. The issue is located in the file /admin/edit-course.php and involves manipulation of...

9.8CVSS5.5AI score0.00414EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•20 views

PT-2025-40838

Name of the Vulnerable Software and Affected Versions Tipray Data Leakage Prevention System version 1.0 Description A flaw exists in Tipray Data Leakage Prevention System that allows for SQL injection. The issue is located in the findRolePage.do file and specifically affects the findRolePage...

9.8CVSS6.9AI score0.00502EPSS
SaveExploits1References10
CVE
CVE
•added 2025/10/05 11:02 p.m.•40 views

CVE-2025-11309

Tipray Data Leakage Prevention System 1.0 is affected. The vulnerability lies in the doFilter function of findDeptPage.do, where manipulation of the sort parameter enables SQL injection. It can be exploited remotely, with public exploit availability noted by multiple sources. Impact includes high...

9.8CVSS7AI score0.00495EPSS
SaveExploits1References5Affected Software1
Patchstack
Patchstack
•added 2025/10/03 10:16 p.m.•17 views

WordPress WP Dispatcher plugin <= 1.2.0 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by theviper17y in WordPress Plugin WP Dispatcher versions = 1.2.0...

8.8CVSS5.8AI score0.0034EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-29966

Malicious code in bioql PyPI...

9.8CVSS7.9AI score0.00861EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-28014

Malicious code in bioql PyPI...

7.6CVSS8.2AI score0.00352EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-24641

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00458EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-32011

Malicious code in bioql PyPI...

8.2CVSS5.4AI score0.00338EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-24985

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00438EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-28395

Malicious code in bioql PyPI...

9.8CVSS7.1AI score0.0059EPSS
SaveExploits1References4
Rows per page
Query Builder