Lucene search
+L

28193 matches found

OSV
OSV
added 2025/11/17 12:15 p.m.11 views

CVE-2025-13277

A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 10:02 a.m.10 views

CVE-2025-13274 Campcodes School Fees Payment Management System ajax.php sql injection

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

6.5CVSS6.3AI score0.00308EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/17 9:32 a.m.12 views

EUVD-2025-197783

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing manipulation of the argument ID results in sql injection. The attack is possible to be...

6.5CVSS6.4AI score0.00308EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/17 9:15 a.m.14 views

CVE-2025-13271

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 8:32 a.m.10 views

CVE-2025-13271 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/17 8:16 a.m.13 views

CVE-2025-13270

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

8.8CVSS5.7AI score0.00308EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/11/17 8:03 a.m.12 views

CVE-2025-13242

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

9.8CVSS6.9AI score0.00435EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 4:06 a.m.23 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS6.4AI score0.00323EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 4:05 a.m.21 views

CVE-2025-13236

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

9.8CVSS6.5AI score0.00323EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/17 3:30 a.m.12 views

EUVD-2025-197749

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has be...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/17 3:30 a.m.16 views

EUVD-2025-197737

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /booksearch.php. Performing manipulation of the argument bookpub/booktitle results in sql injection. It is possible to initiate the attack remotely...

6.5CVSS6.6AI score0.00388EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/11/17 2:52 a.m.19 views

CVE-2025-13233

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/11/17 2:32 a.m.29 views

CVE-2025-13259 Campcodes Supplier Management System edit_unit.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/editunit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS0.0031EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/17 1:32 a.m.36 views

CVE-2025-13257

CVE-2025-13257 affects itsourcecode Inventory Management System 1.0, with the vulnerable element in /admin/user/index.php?view=edit. The issue is an SQL injection caused by manipulation of the ID parameter, exploitable remotely. Public exploits have been disclosed. Documented impact indicates hig...

9.8CVSS6.7AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.24 views

CVE-2024-44659

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php...

0.00408EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.15 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.27 views

CVE-2024-44663

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php...

0.0024EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/17 12:00 a.m.20 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection in manage-tickets.php via the frm_id and aremark parameters due to lack of input validation. Public descriptions from CNVD, RH, CNNVD and CVE records indicate an attacker could execute arbitrary SQL and potentially steal sensitive database d...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.23 views

PT-2025-47146

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the Username parameter within an unknown function of the /login.php...

9.8CVSS6.9AI score0.00415EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.11 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter id/category in the file /index.php. An attacker can exploit this vulnerability to...

8.8CVSS7AI score0.00332EPSS
SaveExploits1References7
Rows per page
Query Builder