Lucene search
+L

482 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•0 views

CVE-2025-8255: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /register.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.4AI score0.00532EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/14 1:44 p.m.•32 views

CVE-2025-7609 code-projects Simple Shopping Cart register.php sql injection

A vulnerability has been found in code-projects Simple Shopping Cart 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument ruseremail leads to sql injection. The attack can be launched remotely. The...

7.5CVSS0.00415EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/14 1:44 p.m.•31 views

CVE-2025-7609

CVE-2025-7609 affects Code-Projects Simple Shopping Cart 1.0. The vulnerability is a SQL injection in the /register.php endpoint caused by unsafely handling the ruser_email parameter. Exploitation can be performed remotely and, per connected sources, the exploit has been publicly disclosed. Multi...

9.8CVSS7.5AI score0.00415EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/14 12:00 a.m.•0 views

CVE-2025-7609: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Shopping Cart 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument ruseremail leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/04 12:00 a.m.•55 views

Student Record System register.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter session in the file /register.php. An attacker can exploit this vulnerability to execute...

8.8CVSS7.2AI score0.00369EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/06/30 4:32 p.m.•38 views

CVE-2025-6915 PHPGurukul Student Record System register.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Record System 3.2. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument session leads to sql injection. The attack may be launched remotely. The...

6.5CVSS0.00369EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•0 views

CVE-2025-6915: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Record System 3.2. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument session leads to sql injection. The attack may be launched remotely. The...

8.8CVSS5.5AI score0.00369EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•1 views

CVE-2025-40734: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirmpassword parameters in /register.php...

6.1CVSS6.1AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/05 9:31 a.m.•40 views

CVE-2025-5650 1000projects Online Notice Board register.php sql injection

A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS0.00481EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/06/05 9:31 a.m.•10 views

CVE-2025-5650 1000projects Online Notice Board register.php sql injection

A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.6AI score0.00481EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•0 views

CVE-2025-5650: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS7AI score0.00481EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/06/04 9:31 a.m.•22 views

CVE-2025-5583 CodeAstro Real Estate Management System register.php sql injection

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

7.5CVSS7.7AI score0.00554EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/04 9:31 a.m.•86 views

CVE-2025-5583

CVE-2025-5583 affects CodeAstro Real Estate Management System 1.0, with an SQL injection in an unknown function of /register.php. The vulnerability allows remote exploitation and the exploit has been disclosed publicly. Multiple sources (NVD, Red Hat, CVE lists) concur on the existence of this SQ...

9.8CVSS7.6AI score0.00554EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•0 views

CVE-2025-5583: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

9.8CVSS6.9AI score0.00554EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:22 a.m.•21 views

CVE-2024-40498

SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php...

9.8CVSS8.7AI score0.01005EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:32 a.m.•14 views

CVE-2023-1354

A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument...

6.1CVSS5.9AI score0.00557EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:31 p.m.•12 views

CVE-2022-25114

Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...

6.1CVSS6.2AI score0.00751EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:51 p.m.•15 views

CVE-2020-15599

Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...

6.1CVSS5.9AI score0.02114EPSS
SaveExploits2
CVE
CVE
•added 2025/05/16 1:31 a.m.•45 views

CVE-2025-4736

The CVE concerns PHPGurukul Daily Expense Tracker 1.1. The vulnerability is a SQL injection in /register.php triggered by manipulating the email parameter, with remote exploitation and a publicly disclosed exploit. No patch/version fix details are provided in the documents. A temporary workaround...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/05/16 1:31 a.m.•51 views

CVE-2025-4736 PHPGurukul Daily Expense Tracker register.php sql injection

A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00514EPSS
SaveExploits1References5
Rows per page
Query Builder