CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8925 matches found

CNNVD•added 2025/10/06 12:00 a.m.•22 views

Code-Projects Online Course Registration SQL Injection Vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/manage-students.php. An attacker can...

9.8CVSS7.4AI score0.00417EPSS

SaveExploits1References5

Positive Technologies•added 2025/10/06 12:00 a.m.•38 views

PT-2025-40935

Name of the Vulnerable Software and Affected Versions code-projects Online Course Registration version 1.0 Description A flaw exists in code-projects Online Course Registration 1.0 that allows for SQL injection. The issue is located in the file /admin/edit-course.php and involves manipulation of...

9.8CVSS5.4AI score0.00414EPSS

SaveExploits1References11

Positive Technologies•added 2025/10/06 12:00 a.m.•21 views

PT-2025-40838

Name of the Vulnerable Software and Affected Versions Tipray Data Leakage Prevention System version 1.0 Description A flaw exists in Tipray Data Leakage Prevention System that allows for SQL injection. The issue is located in the findRolePage.do file and specifically affects the findRolePage...

9.8CVSS7.1AI score0.00502EPSS

SaveExploits1References10

CNNVD•added 2025/10/06 12:00 a.m.•22 views

CampCodes Online Apartment Visitor Management SQL Injection Vulnerability

CampCodes Online Apartment Visitor Management is an online apartment visitor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Apartment Visitor Management version 1.0, which stems from an incorrect manipulation of the parameter editid in the...

9.8CVSS7.1AI score0.00417EPSS

SaveExploits1References5

CVE•added 2025/10/05 11:02 p.m.•41 views

CVE-2025-11309

Tipray Data Leakage Prevention System 1.0 is affected. The vulnerability lies in the doFilter function of findDeptPage.do, where manipulation of the sort parameter enables SQL injection. It can be exploited remotely, with public exploit availability noted by multiple sources. Impact includes high...

9.8CVSS7.1AI score0.00495EPSS

SaveExploits1References5Affected Software1

Positive Technologies•added 2025/10/05 12:00 a.m.•23 views

PT-2025-40825

Name of the Vulnerable Software and Affected Versions Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 version 1.0 Description A security flaw exists in the doFilter function of the findDeptPage.do file. Manipulation of the sort argument can lead to SQL injection. This issue can be...

7.5CVSS7.3AI score0.00495EPSS

SaveExploits1References8

Patchstack•added 2025/10/03 10:16 p.m.•17 views

WordPress WP Dispatcher plugin <= 1.2.0 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by theviper17y in WordPress Plugin WP Dispatcher versions = 1.2.0...

8.8CVSS5.8AI score0.00348EPSS

SaveExploits0References1Affected Software1