Lucene search
+L

5728 matches found

Vulnrichment
Vulnrichment
added 2025/11/14 3:32 p.m.5 views

CVE-2025-13169 code-projects Simple Online Hotel Reservation System add_query_reserve.php sql injection

A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /addqueryreserve.php. Such manipulation of the argument roomid leads to sql injection. The attack can be executed remotely. The exploit has...

7.5CVSS7.3AI score0.00431EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/14 3:32 p.m.29 views

CVE-2025-13169

CVE-2025-13169 affects the Simple Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in the file /add_query_reserve.php caused by unsafely handling the room_id parameter, allowing remote exploitation. Public disclosures exist, and multiple sources (CNVD, RH, CNNVD, NVD, CV...

9.8CVSS7.3AI score0.00431EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/14 12:0 a.m.6 views

Code-Projects Simple Online Hotel Reservation System SQL注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. The Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the /admin/editaccount.php file that does not securely filter the adminid parameter. An attacker can explo...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/11/13 11:8 p.m.10 views

CVE-2025-13076

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

9.8CVSS6.8AI score0.00381EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/13 8:15 p.m.11 views

CVE-2025-64726

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...

7.3CVSS0.00148EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/13 7:55 p.m.9 views

CVE-2025-64726 External Control of System or Configuration Setting and Uncontrolled Search Path Element in sfw

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...

7.3CVSS7.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/11/13 7:55 p.m.5 views

CVE-2025-64726 External Control of System or Configuration Setting and Uncontrolled Search Path Element in sfw

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...

7.3CVSS7.7AI score0.00148EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/13 7:55 p.m.7 views

EUVD-2025-175357

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions separate from installers prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project...

7.3CVSS7.5AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.17 views

PT-2025-46904

Name of the Vulnerable Software and Affected Versions Socket Firewall versions prior to 0.15.5 Description Socket Firewall is an HTTP/HTTPS proxy server designed to enforce security policies by blocking dangerous packages. Versions of Socket Firewall prior to 0.15.5 are susceptible to arbitrary...

7.3CVSS7.3AI score0.00148EPSS
SaveExploits0References6
NVD
NVD
added 2025/11/12 11:15 p.m.11 views

CVE-2025-13075

A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing manipulation of the argument eid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be...

9.8CVSS0.00381EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/12 11:15 p.m.10 views

CVE-2025-13076

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

9.8CVSS5.8AI score0.00381EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/12 11:2 p.m.7 views

CVE-2025-13076 code-projects Responsive Hotel Site usersetting.php sql injection

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

5.8CVSS4.9AI score0.00381EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/12 11:2 p.m.17 views

CVE-2025-13076 code-projects Responsive Hotel Site usersetting.php sql injection

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

5.8CVSS0.00381EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/12 11:2 p.m.20 views

CVE-2025-13076

The CVE-2025-13076 affects code-projects Responsive Hotel Site 1.0, specifically the /admin/usersetting.php file where manipulation of the usname parameter enables SQL injection. Multiple connected sources (NVD, CNVD, Red Hat, CVE lists, PTSecurity) confirm remote exploitation and that the exploi...

9.8CVSS4.9AI score0.00381EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/12 10:32 p.m.22 views

CVE-2025-13075 code-projects Responsive Hotel Site usersettingdel.php sql injection

A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing manipulation of the argument eid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be...

5.8CVSS0.00381EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/12 10:32 p.m.6 views

CVE-2025-13075 code-projects Responsive Hotel Site usersettingdel.php sql injection

A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing manipulation of the argument eid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be...

5.8CVSS4.9AI score0.00381EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/12 10:32 p.m.27 views

CVE-2025-13075

The CVE-2025-13075 affects code-projects Responsive Hotel Site 1.0, specifically the file /admin/usersettingdel.php where the eid parameter is manipulated. The vulnerability is a SQL injection arising from lack of input validation, enabling remote exploitation. Public exploits are noted. Several ...

9.8CVSS4.9AI score0.00381EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/12 12:6 p.m.12 views

CVE-2025-41101

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in'/projects/save'...

5.4CVSS7.3AI score0.00162EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.7 views

Code-Projects Responsive Hotel Site SQL注入漏洞

Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter eid in the file /admin/usersettingdel.php. An attacker can exploit this...

9.8CVSS5.7AI score0.00381EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/11 12:30 p.m.8 views

EUVD-2025-84356

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in'/projects/save'...

5.1CVSS6.8AI score0.00162EPSS
SaveExploits0References2
Rows per page
Query Builder