CVE-2025-49013

WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue arises from unsafe usage of $ github.event.review.body and other user controlled variables directly inside shell script contexts in GitHub...

CVE-2025-49013 WilderForge vulnerable to code Injection via GitHub Actions Workflows

WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue arises from unsafe usage of $ github.event.review.body and other user controlled variables directly inside shell script contexts in GitHub...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the /urinalysisrecord.php file. The vulnerability can be exploited by an attacker to...

PT-2025-24441 · Code Projects · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System versions up to 1.0 Description: A critical issue affects the processing of the file /user/confirm password.php. The manipulation of the cid argument leads to SQL injection. The attack can be initiated remotely...

CVE-2025-5762

A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file viewhematology.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-5708

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-5756 code-projects Real Estate Property Management System EditCity.php sql injection

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2025-5711 code-projects Real Estate Property Management System InsertCity.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/InsertCity.php. The manipulation of the argument cmbState leads to sql injection. It is possible to launch the attack...

CVE-2025-5710 code-projects Real Estate Property Management System InsertState.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/InsertState.php. The manipulation of the argument txtStateName leads to sql injection. The attack may be...

Code-Projects Patient Record Management System 注入漏洞

Code-Projects Patient Record Management System is a Code-Projects open source patient record management system. Code-Projects Patient Record Management System version 1.0 suffers from an injection vulnerability, which stems from an incorrect manipulation of the parameter itrno in the file...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter itrno in the file viewhematology.php. An attacker can...

Code-Projects Laundry System 安全漏洞

Laundry System is a laundry system. The Laundry System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit this vulnerability to spoof a malicious reque...

PT-2025-24050

Name of the Vulnerable Software and Affected Versions code-projects Traffic Offense Reporting System version 1.0 Description A problematic issue was found in the system, affecting an unknown part, and leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendatio...

PT-2025-24070 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /Admin/EditCity.php. This issue leads to sql injection and can be exploited...

code-projects Real Estate Property Management System 注入漏洞

Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. An injection vulnerability exists in code-projects Real Estate Property Management System version 1.0, which is caused by incorrect manipulation of the parameter txtFr...

PT-2025-24103 · Unknown · Code-Projects Laundry System

Name of the Vulnerable Software and Affected Versions: code-projects Laundry System version 1.0 Description: A problematic issue was found in the code-projects Laundry System, affecting an unknown part of the file /data/edit laundry.php. The manipulation of the Customer argument leads to cross-si...

PT-2025-23993 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, affecting the /Admin/NewsReport.php file. The txtFrom argument is vulnerable to sql injection, allowing for remote attacks. Th...

1000 Projects ABC Courier Management System Security Breach

1000 Projects ABC Courier Management System is an open source courier management system from 1000 Projects. 1000 Projects ABC Courier Management System version 1.0 has a security vulnerability , the vulnerability stems from the wrong operation of the parameter Username in the file / adminSQL ,...

PT-2025-24279 · Unknown · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /birthing.php. The manipulation of the itr no and comp id arguments leads to SQL...

PT-2025-24102 · Unknown · Code-Projects Laundry System

Name of the Vulnerable Software and Affected Versions: code-projects Laundry System version 1.0 Description: A vulnerability was found in the code-projects Laundry System, affecting some unknown functionality of the file /data/insert laundry.php. The manipulation of the Customer argument leads to...