106 matches found
CVE-2026-78244: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...
CVE-2025-1381
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajaxcity.php. The manipulation of the argument CityName leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-14900
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. T...
CodeAstro Real Estate Management System SQL注入漏洞
CodeAstro Real Estate Management System is a real estate management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/userdelete.php, which could lead t...
CVE-2025-14898: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...
CVE-2025-14897: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is...
CVE-2025-14899: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made availabl...
CVE-2025-14900: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. T...
EUVD-2024-16877
Malicious code in bioql PyPI...
EUVD-2025-16918
Malicious code in bioql PyPI...
EUVD-2024-16336
Malicious code in bioql PyPI...
EUVD-2024-47200
Malicious code in bioql PyPI...
EUVD-2025-2136
Malicious code in bioql PyPI...
EUVD-2025-17038
Malicious code in bioql PyPI...
EUVD-2025-16920
Malicious code in bioql PyPI...
EUVD-2025-16859
Malicious code in bioql PyPI...
EUVD-2025-16864
Malicious code in bioql PyPI...
EUVD-2023-37922
Malicious code in bioql PyPI...
CVE-2025-9942: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /submitproperty.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2025-9939: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /propertyview.php. Such manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...