3345 matches found
CVE-2025-12333 code-projects E-Commerce Website supplier_add.php cross site scripting
A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-12328
A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /contestproblem.php. Such manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...
CVE-2025-12328 shawon100 RUET OJ contestproblem.php sql injection
A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /contestproblem.php. Such manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...
CVE-2025-12328 shawon100 RUET OJ contestproblem.php sql injection
A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /contestproblem.php. Such manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...
CVE-2025-12328
CVE-2025-12328 affects shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The vulnerability is a SQL injection in the function handling the parameter Name in the file /contestproblem.php, reported to be exploitable remotely. Multiple connected sources confirm the issue but do not p...
CVE-2025-12316 code-projects Courier Management System edit-courier.php sql injection
A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The manipulation of the argument OfficeName leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...
CVE-2025-12316
CVE-2025-12316 affects Code-Projects Courier Management System 1.0, specifically the /courier/edit-courier.php file. The vulnerability arises from improper handling of the OfficeName parameter, enabling SQL injection that can be exploited remotely. Multiple sources confirm the issue and note that...
Code-Projects Courier Management System SQL注入漏洞
Code-Projects Courier Management System is an open source courier management system from Code-Projects. Code-Projects Courier Management System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter OfficeName in the file...
CVE-2025-9322
The Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress is vulnerable to SQL Injection via the 'wpfs-form-name' parameter in all versions up to, and including, 8.3.1 due to insufficient escaping on the user supplied parameter and lack ...
CVE-2025-9322 Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL Injection
The Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress is vulnerable to SQL Injection via the 'wpfs-form-name' parameter in all versions up to, and including, 8.3.1 due to insufficient escaping on the user supplied parameter and lack ...
Tenda AC6 安全漏洞
Tenda AC6 is a dual-band wireless router from Tenda, designed for 100 Gigabit fiber optic home users. The Tenda AC6 suffers from a stack buffer overflow vulnerability, which originates from the ssid parameter in the fastsettingwifiset function failing to properly validate the length of the input...
EUVD-2025-35100
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in worksheet.php via the participant_name parameter. The root cause is an unvalidated/unsanitized input in worksheet.php that can be reflected in the web page. The documents do not provide details on affected env...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-61539
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
DataEase SQL注入漏洞
DataEase is a set of Java-based development of open source data visualization and analysis tools to help users quickly analyze data and insight into business trends , so as to achieve business improvement and optimization . DataEase /de2api/datasetData/tableField processing tableName parameter...