Lucene search
K

513 matches found

Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.2 views

PT-2025-28800 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: Code-projects Library System version 1.0 Description: A critical issue has been found in the processing of the file /notapprove.php, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.1 views

Code-Projects Library System 注入漏洞

Library System is a library system. The Library System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /add-teacher.php. An attacker can exploit this vulnerability to execute illega...

9.8CVSS7.9AI score0.00277EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.1 views

PT-2025-28456 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue was found in the code-projects Library System. This issue affects the /add-teacher.php file and is related to the manipulation of the Username argument, leading to SQL...

9.8CVSS7.5AI score0.00277EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.3 views

Code-Projects E-Commerce Site Security Vulnerability

Code-Projects E-Commerce Site is an e-commerce site of Code-Projects open source. A security vulnerability exists in version 1.0 of the code-projects Library System, which stems from improper manipulation of the parameter idn in the file /teacher-issue-book.php, which could lead to an SQL injecti...

9.8CVSS7AI score0.00277EPSS
Exploits1References5
CNVD
CNVD
added 2025/07/07 12:0 a.m.0 views

Library System profile.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter phone in the file /profile.php. An attacker can exploit this vulnerability to execute illegal SQL...

9.8CVSS8.3AI score0.00204EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/07 12:0 a.m.2 views

Library System student-issue-book.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter reg in the file /student-issue-book.php. An attacker can exploit this vulnerability to execute illeg...

9.8CVSS8.3AI score0.00204EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/07 12:0 a.m.1 views

Library System Code Issue Vulnerability

Library System is a library system. Library System has a code issue vulnerability that stems from the lack of valid validation of uploaded files by the parameter image in the file /profile.php. An attacker can exploit this vulnerability to upload malicious files...

9.8CVSS7.3AI score0.00347EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/02 9:20 a.m.5 views

CVE-2025-6900

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS7.4AI score0.00347EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/01 1:27 a.m.4 views

CVE-2025-6837

A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

9.8CVSS7.3AI score0.00347EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/01 1:27 a.m.3 views

CVE-2025-6836

A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipulation of the argument phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/01 12:22 a.m.4 views

CVE-2025-6835

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References1
OSV
OSV
added 2025/06/30 9:15 a.m.3 views

CVE-2025-6900

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS5.6AI score0.00347EPSS
Exploits1References5
NVD
NVD
added 2025/06/30 9:15 a.m.4 views

CVE-2025-6900

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS0.00347EPSS
Exploits1References5
CVE
CVE
added 2025/06/30 9:2 a.m.16 views

CVE-2025-6900

The CVE-2025-6900 entry affects code-projects Library System 1.0, with the flaw located in /add-book.php where the image parameter allows unrestricted file uploads. This remote, publicly disclosed vulnerability could enable attackers to upload arbitrary files. Several sources (NVD, Red Hat, CNNVD...

9.8CVSS6.5AI score0.00347EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/30 9:2 a.m.2 views

CVE-2025-6900 code-projects Library System add-book.php unrestricted upload

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

6.5CVSS7.3AI score0.00347EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/30 9:2 a.m.7 views

CVE-2025-6900 code-projects Library System add-book.php unrestricted upload

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

6.5CVSS0.00347EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/06/30 12:0 a.m.1 views

PT-2025-27429 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical vulnerability has been found in the code-projects Library System, affecting unknown code of the file /add-book.php. The manipulation of the image argument leads to unrestricted...

9.8CVSS7.3AI score0.00347EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.1 views

Code-Projects Library System 代码问题漏洞

Library System is a library system. Library System has a code issue vulnerability that stems from the lack of valid validation of uploaded files by the parameter image in the file /add-book.php. An attacker can exploit this vulnerability to upload malicious files...

9.8CVSS7.2AI score0.00347EPSS
Exploits1References6
NVD
NVD
added 2025/06/29 1:15 a.m.4 views

CVE-2025-6836

A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipulation of the argument phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS0.00204EPSS
Exploits1References5
NVD
NVD
added 2025/06/29 1:15 a.m.4 views

CVE-2025-6837

A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

9.8CVSS0.00347EPSS
Exploits1References5
Rows per page
Query Builder