Lucene search
+L

5746 matches found

CNNVD
CNNVD
added 2025/01/19 12:0 a.m.8 views

Code-Projects Fantasy-Cricket 注入漏洞

Code-Projects Fantasy-Cricket is a Code-Projects open source system. An injection vulnerability exists in Code-Projects Fantasy-Cricket version 1.0, which stems from the parameter uname in the file /dash/update.php that can cause SQL injection...

9.8CVSS7AI score0.00543EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/01/17 7:31 p.m.38 views

CVE-2025-0536 1000 Projects Attendance Tracking Management System edit_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.0055EPSS
SaveExploits1References5
OSV
OSV
added 2025/01/17 4:15 p.m.5 views

CVE-2025-0530

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /parse/feedbacksystem.php. The manipulation of the argument type leads to cross site scripting. The attack can be initiated remotely. The exploit...

8.2CVSS3.7AI score0.00489EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/01/17 4:0 p.m.10 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS7.4AI score0.00447EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/17 4:0 p.m.60 views

CVE-2025-0531

CVE-2025-0531 affects code-projects Chat System 1.0. A SQL injection flaw exists in the /user/leaveroom.php?id= parameter caused by lack of input validation. This allows remote attackers to exploit the vulnerability, with confidentiality impact described as HIGH in the NVD metrics and public disc...

7.5CVSS7.7AI score0.00447EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/01/17 4:0 p.m.36 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS0.00447EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/17 12:0 a.m.8 views

PT-2025-3936 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code and classified as problematic. This issue affects unknown code of the file / parse/ feedback system.php. The manipulation of the type argument...

8.2CVSS4.4AI score0.00489EPSS
SaveExploits1References9
vulnersOsv
vulnersOsv
added 2025/01/15 6:30 a.m.9 views

03-08 (=1.0.0), 06-jobs-api-vydeekelz (=1.0.0) +4051 more potentially affected by CVE-2025-23061 via mongoose (>=8.0.0 <=8.9.4)

mongoose NPM version =8.0.0, =1.0.0, =1.6.3, =1.0.0, =1.1.2, =0.1.2, =0.1.143 and more Source cves: CVE-2025-23061 Source advisory: OSV:GHSA-VG7J-7CWX-8WGW...

9.8CVSS7.5AI score0.07284EPSS
SaveExploits1
Circl
Circl
added 2025/01/14 5:4 p.m.5 views

GHSA-HMG8-H7QF-7CXR

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:11:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1589...

5.3AI score
SaveExploits0References2
NVD
NVD
added 2025/01/13 5:15 p.m.23 views

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS0.00362EPSS
SaveExploits3References2
OSV
OSV
added 2025/01/13 5:15 p.m.9 views

CVE-2024-57488

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting XSS via the vehicalorcview parameter in /admin/edit-vehicle.php...

6.5CVSS5.8AI score0.02515EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.9 views

PT-2025-3456 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The file upload feature in the affected system does not validate file extensions or MIME types, allowing an attacker to upload a PHP shell without restrictions and execute comman...

6.5CVSS8.5AI score0.02515EPSS
SaveExploits3References6
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.7 views

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from a file upload feature that does not validate file extensions or MIME types, allowing an attacker t...

6.5CVSS8.2AI score0.02515EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.8 views

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from the vulnerability of the vehicalorcview parameter to cross-site scripting attacks...

6.5CVSS7.3AI score0.02515EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2025/01/13 12:0 a.m.44 views

CVE-2024-57487

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server...

0.02515EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.8 views

PT-2025-3457 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the vehicalorcview parameter in the "/admin/edit-vehicle.php" API endpoint. This flaw can be exploited by attackers to inject...

6.5CVSS7.3AI score0.02515EPSS
SaveExploits3References7
Cvelist
Cvelist
added 2025/01/09 7:0 a.m.41 views

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00639EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/09 6:33 a.m.7 views

CVE-2024-13041 Incorrect User Management in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. A...

4.2CVSS6.4AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.7 views

Code-Projects Admission Management System 注入漏洞

Code-Projects Admission Management System is a Code-Projects open source enrollment management system. Code-Projects Admission Management System version 1.0 suffers from an injection vulnerability, which stems from an SQL injection in the parameter uid...

9.8CVSS7.9AI score0.007EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.11 views

Code-Projects Online Bike Rental System 代码问题漏洞

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

9.8CVSS6.7AI score0.00526EPSS
SaveExploits1References5
Rows per page
Query Builder