Lucene search
+L

7483 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•5 views

CVE-2025-8237: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updates1.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has be...

9.8CVSS5.6AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•9 views

CVE-2025-8236: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.5AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•8 views

CVE-2025-8235: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/product.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

9.8CVSS5.5AI score0.00559EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•7 views

CVE-2025-8234: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS5.5AI score0.00559EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•8 views

CVE-2025-8238: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates2.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•7 views

CVE-2025-8232: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS5.5AI score0.00559EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/26 12:00 a.m.•21 views

PT-2025-30945 · Code Projects · Voting System 1.0

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical vulnerability exists in code-projects Voting System 1.0, related to unrestricted file upload. The issue affects an unknown functionality within the /admin/candidates add.php file...

6.5CVSS6.3AI score0.00406EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/07/26 12:00 a.m.•17 views

Code-Projects Voting System 代码问题漏洞

Code-Projects Voting System is a Code-Projects open source election system. A code issue vulnerability exists in Code-Projects Voting System version 1.0, which stems from an unlimited upload due to the parameter photo in file /admin/candidatesadd.php...

6.5CVSS6.7AI score0.00406EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/26 12:00 a.m.•6 views

CVE-2025-8185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS5.5AI score0.00506EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/26 12:00 a.m.•7 views

CVE-2025-8174: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/candidatesadd.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched remotely. The exploit...

6.5CVSS5.4AI score0.00406EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/07/25 6:15 p.m.•16 views

CVE-2025-8164

A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file sendmessage.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

8.8CVSS5.8AI score0.00444EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/25 6:02 p.m.•37 views

CVE-2025-8164 code-projects Public Chat Room send_message.php sql injection

A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file sendmessage.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

6.5CVSS0.00444EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/25 6:02 p.m.•11 views

CVE-2025-8164 code-projects Public Chat Room send_message.php sql injection

A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file sendmessage.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

6.5CVSS6.8AI score0.00444EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•4 views

CVE-2025-8165: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approvereservation.php. The manipulation of the argument occasion leads to sql injection. The attack may be initiated remotely. The exploit h...

8.8CVSS5.5AI score0.00553EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•18 views

PT-2025-30936 · Unknown · Code-Projects Document Management System

Name of the Vulnerable Software and Affected Versions: code-projects Document Management System version 1.0 Description: A critical issue has been found in code-projects Document Management System that allows for unrestricted file upload through manipulation of the uploaded file argument in the...

6.5CVSS6.4AI score0.00377EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•25 views

Code-Projects Church Donation System 安全漏洞

Code-Projects Church Donation System is an open source church donation system from Code-Projects. A security vulnerability exists in Code-Projects Church Donation System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /admin/index.php in the HTTP POST...

9.8CVSS7.8AI score0.00597EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•18 views

PT-2025-30918 · Unknown · Code-Projects Public Chat Room

Name of the Vulnerable Software and Affected Versions: code-projects Public Chat Room version 1.0 Description: A critical issue exists in the send message.php file. Manipulation of the ID argument can lead to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to t...

8.8CVSS6.7AI score0.00444EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•36 views

code-projects Public Chat Room 注入漏洞

Code-Projects Public Chat Room is an open source public chat room software from Code-Projects. An injection vulnerability exists in code-projects Public Chat Room version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file sendmessage.php...

8.8CVSS6.9AI score0.00444EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•25 views

PT-2025-30939 · 1000 Projects · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects ABC Courier Management System version 1.0 Description: A critical issue exists in 1000 Projects ABC Courier Management System version 1.0. The vulnerability is located in an unknown functionality of the file /Add reciver.php...

9.8CVSS7.6AI score0.00575EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•18 views

Code-Projects Document Management System 代码问题漏洞

Code-Projects Document Management System is an open source document management system from Code-Projects. A code issue vulnerability exists in Code-Projects Document Management System version 1.0, which stems from an incorrect manipulation of the parameter uploadedfile in file/insert.php resultin...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References6
Rows per page
Query Builder