CVE-2025-6352: Direct Request

A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-6347: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Responsive Blog 1.0/1.12.4/3.3.4. It has been declared as problematic. This vulnerability affects unknown code of the file /responsive/resblog/blogadmin/admin/pageViewMembers.php. The manipulation leads to cross site scripting. The attack can be initiate...

CVE-2025-6306: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/adminindex.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6307: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /function/editcustomer.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit...

PT-2025-26311 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue has been found in the processing of the file /admin/admin football.php. The manipulation of the pid argument leads to SQL injection. The attack may be initiated remotel...

PT-2025-26272 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue was found in the code-projects Online Shoe Store, affecting an unknown functionality of the file /cart.php. The manipulation of the qty argument leads to SQL injection...

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware. "The malware enables data exfiltration including credentials, browser data, and session tokens, remote access, and long-term...

CVE-2025-6159 code-projects Hostel Management System allocate_room.php sql injection

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6159 code-projects Hostel Management System allocate_room.php sql injection

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6159: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-25617 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical vulnerability was found in the code-projects Hostel Management System. This issue affects unknown code of the file /allocate room.php. The manipulation of the search b...

CVE-2025-6124

The CVE-2025-6124 entry concerns code-projects Restaurant Order System 1.0. A SQL injection flaw exists in the file /tablelow.php caused by improper handling of the ID parameter. The issue can be triggered remotely and, according to multiple sources in the connected documents, the exploit has bee...

CVE-2025-6123 code-projects Restaurant Order System payment.php sql injection

A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6122 code-projects Restaurant Order System table.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

Code-Projects Restaurant Order System Injection Vulnerabilities

Code-Projects Restaurant Order System is Code-Projects open source a restaurant order system. Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to incorrect manipulation of the parameter tabidNoti in the file...

Code-Projects Restaurant Order System Injection Vulnerabilities

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameter ID in the file /tablelow.php...

Code-Projects Restaurant Order System Injection Vulnerabilities

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. An injection vulnerability exists in code-projects Restaurant Order System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /table.php...

CVE-2025-6123: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-25555 · Code Projects · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical issue affects the processing of the file /tablelow.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The...

PT-2025-25553 · Unknown · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical vulnerability has been found in the code-projects Restaurant Order System, affecting the /payment.php file. The manipulation of the tabidNoti argument leads to SQL...