Code-Projects Tourism Management System 安全漏洞

Code-Projects Tourism Management System is an open source tourism management system from Code-Projects. A security vulnerability exists in Code-Projects Tourism Management System version 1.0, which is caused by a buffer overflow due to incorrect manipulation of the username/password parameters in...

CVE-2025-4745 code-projects Employee Record System current_employees.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to...

CVE-2025-4743

CVE-2025-4743 concerns Code-Projects’ Employee Record System v1.0. The vulnerability resides in the /dashboard/getData.php endpoint, where unsafely handling the keywords parameter enables SQL injection. Multiple connected sources (CNVD, RH, NVD, CVE listing, CNNVD, and others) corroborate that th...

CVE-2025-4743 code-projects Employee Record System getData.php sql injection

A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The...

PT-2025-21603 · Unknown · Code-Projects Employee Record System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Record System version 1.0 Description: A problematic issue was found in the code-projects Employee Record System. This issue affects an unknown part of the file current employees.php. The manipulation of the arguments...

PT-2025-21601 · Code Projects · Code-Projects Employee Record System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Record System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file "/dashboard/getData.php". The manipulation of the keywords argument leads to SQL injection...

Code-Projects Employee Record System 代码注入漏洞

Code-Projects Employee Record System is a Code-Projects open source employee record system. Code-Projects Employee Record System version 1.0 has a code injection vulnerability , the vulnerability stems from the currentemployees.php file currentemployeeid/firstname/middlename/lastname parameters a...

CVE-2025-4745: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to...

CVE-2025-4743: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The...

CVE-2025-4744: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\editemployee.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross...

CVE-2025-47783

Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to 1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to data theft, session hijacking, unauthorized actions on behalf of the user, and other attack...

CVE-2025-47783: Improper Neutralization of Input During Web Page Generation

Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to 1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to data theft, session hijacking, unauthorized actions on behalf of the user, and other attack...

CVE-2025-4498 code-projects Simple Bus Reservation System Install Bus install stack-based overflow

A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component Install Bus. The manipulation of the argument bus leads to stack-based buffer overflow. It is possible to launch the attack on the local...

Code-Projects Simple Bus Reservation System 安全漏洞

Code-Projects Simple Bus Reservation System is a Code-Projects open source simple bus reservation system. A security vulnerability exists in Code-Projects Simple Bus Reservation System version 1.0, which originates from a stack-based buffer overflow due to the parameter bus operation of function...

PT-2025-20624 · Code Projects · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hotel Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Hotel Management System. The issue affects the Edit function of the Edit Room component. The manipulation of the...

CVE-2025-4501: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has...

CVE-2025-4497: Buffer Copy without Checking Size of Input

A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the component Sign In. The manipulation of the argument password2 leads to buffer overflow. Attacking locally is a requirement. The exploit has...

CVE-2025-4500: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached...

Code-Projects Album Management System 安全漏洞

Code-Projects Album Management System is an open source album management system from Code-Projects. A security vulnerability exists in Code-Projects Album Management System version 1.0, which stems from vulnerability to stack buffer overflow attacks...

Code-Projects Jewelery Store Management system 安全漏洞

Code-Projects Jewelery Store Management system is Code-Projects open source a jewelry store management system. A security vulnerability exists in Code-Projects Jewelery Store Management system version 1.0, which originates from a stack-based buffer overflow due to a parameter str2 operation in th...