Lucene search
K

237 matches found

Nuclei
Nuclei
added 12 hours ago20 views

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS6.8AI score0.017EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/26 9:44 p.m.2 views

CVE-2026-25741 Zulip Vulnerable to Modification of Payment Method (Stripe Default Card) by Non-Billing Users

Zulip is an open-source team collaboration tool. Prior to commit bf28c82dc9b1f630fa8e9106358771b20a0040f7, the API endpoint for creating a card update session during an upgrade flow was accessible to users with only organization member privileges. When the associated Stripe Checkout session is...

7.1CVSS5.8AI score0.00275EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 10:48 a.m.7 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS8.1AI score0.00888EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.14 views

CVE-2019-16752

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...

4.3CVSS6.8AI score0.00407EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:30 a.m.7 views

CVE-2019-16753

An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. The content to be signed is composed of a representation of strings, rather than being composed of their binary representations. This is a weak signature scheme design that would allow the reuse of signatur...

7.5CVSS6.8AI score0.00744EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2025/12/12 12:0 a.m.140 views

📄 EduplusCampus Student Portal 3.0.1 Insecure Direct Object Reference

EduplusCampus Student Portal version 3.0.1 suffers from an insecure direct object reference vulnerability. ============================================================================================================================================= | Title : EduplusCampus student portal v 3.0.1...

6.5CVSS7AI score0.00297EPSS
Exploits3
CNVD
CNVD
added 2025/11/20 12:0 a.m.4 views

School Fees Payment Management System /ajax.php?action=save_payment File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

8.8CVSS6AI score0.0027EPSS
Exploits1References1
CNVD
CNVD
added 2025/11/20 12:0 a.m.6 views

School Fees Payment Management System /ajax.php?action=save_course File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of an externally entered SQL statement in the parameter ID of the file...

8.8CVSS6AI score0.0027EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 10:9 a.m.2 views

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

8.8CVSS6.3AI score0.0027EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 10:9 a.m.3 views

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

8.8CVSS6.3AI score0.0027EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 8:6 a.m.2 views

CVE-2025-13270

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

8.8CVSS6.9AI score0.0027EPSS
Exploits1References1
NVD
NVD
added 2025/11/17 10:15 a.m.2 views

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

8.8CVSS0.0027EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 9:32 a.m.10 views

CVE-2025-13273

Campcodes School Fees Payment Management System 1.0 is affected by CVE-2025-13273 due to a SQL injection in the /ajax.php?action=delete_payment endpoint caused by unsafely manipulated ID parameters. Remote exploitation is possible, and an exploit has been publicly released. The issue is corrobora...

8.8CVSS6.3AI score0.0027EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 9:32 a.m.1 views

CVE-2025-13273 Campcodes School Fees Payment Management System ajax.php sql injection

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

6.5CVSS6.3AI score0.0027EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 8:32 a.m.7 views

CVE-2025-13271 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.6AI score0.00339EPSS
Exploits1References5
NVD
NVD
added 2025/11/17 8:16 a.m.3 views

CVE-2025-13270

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

8.8CVSS0.0027EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 7:32 a.m.9 views

CVE-2025-13269

The CVE-2025-13269 entry affects Campcodes School Fees Payment Management System 1.0. A SQL injection vulnerability exists in the /ajax.php?action=save_payment handler, triggered by manipulating the ID parameter. Reports across CNVD, Red Hat advisory, CNNVD, CIRCL, and others confirm a remote-att...

8.8CVSS6.5AI score0.0027EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 7:32 a.m.3 views

CVE-2025-13269 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savepayment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.4AI score0.0027EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.5 views

CampCodes School Fees Payment Management System SQL注入漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /managecourse.php. An...

9.8CVSS7.2AI score0.00339EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

CampCodes School Fees Payment Management System SQL注入漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

8.8CVSS6.7AI score0.0027EPSS
Exploits1References6
Rows per page
Query Builder