22392 matches found
EUVD-2025-33783
A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...
PT-2025-41701
Name of the Vulnerable Software and Affected Versions SourceCodester Best Salon Management System version 1.0 Description A security flaw exists in SourceCodester Best Salon Management System 1.0. The issue is a SQL injection affecting an unknown part of the file /panel/add invoice.php...
PT-2025-41694
Name of the Vulnerable Software and Affected Versions code-projects E-Banking System version 1.0 Description A security issue exists in the E-Banking System. The flaw is located within the /register.php script, which handles POST requests. Manipulation of the username or password parameters can...
PT-2025-41688
Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Result System version 1.0 Description A SQL injection issue exists in the SourceCodester Online Student Result System 1.0. The flaw is located in the /login.php script, where manipulating the Username parameter ca...
PT-2025-41668
Name of the Vulnerable Software and Affected Versions Campcodes Online Apartment Visitor Management System version 1.0 Description A SQL injection issue exists in Campcodes Online Apartment Visitor Management System version 1.0. The issue is located in the file /admin-profile.php and involves...
PT-2025-41687
Name of the Vulnerable Software and Affected Versions Simple Food Ordering System version 1.0 Description A security issue exists in Simple Food Ordering System 1.0 related to the manipulation of the cname argument in the editcategory.php file, leading to a SQL injection. This allows for remote...
PT-2025-41693
Name of the Vulnerable Software and Affected Versions harry0703 MoneyPrinterTurbo versions through 1.2.6 Description A flaw exists in the upload music function within the app/controllers/v1/music.py file of the API Endpoint component. Manipulation of the File argument can result in path traversal...
PT-2025-41690
Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Ordering Food System version 1.0 Description A SQL injection issue exists due to improper processing of the Status argument in the /all-orders.php file. Remote exploitation is possible. The exploit has been publicly...
EUVD-2025-33772
A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...
CVE-2025-11556
A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of the argument table causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used...
CVE-2025-11585
A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
EUVD-2025-33780
A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-11584 code-projects Online Job Search Engine searchjob.php sql injection
A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...
CVE-2025-11584
The CVE-2025-11584 entry concerns code-projects Online Job Search Engine 1.0. Multiple connected sources confirm a SQL injection vulnerability in /searchjob.php, triggered by manipulating the txtspecialization parameter. This is described as remotely exploitable with the exploit publicly disclose...
CVE-2025-11584 code-projects Online Job Search Engine searchjob.php sql injection
A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...
CVE-2025-62245
Cross-site request forgery CSRF vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments...
CVE-2025-11581
PowerJob (up to version 5.1.2) contains a security vulnerability in the OpenAPIController’s /openApi/runJob endpoint. The issue is due to missing authorization in that code path, allowing a remote attacker to manipulate the request without authentication. Multiple connected sources (NVD, Red Hat ...
GHSA-87XJ-GHMC-C3XQ PowerJob has Missing Authorization in its /user/list file
A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited...
PowerJob has Missing Authorization in its /user/list file
A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited...
