Lucene search
+L

24330 matches found

osv_cve
osv_cve
•added 2025/11/24 4:15 a.m.•15 views

CVE-2025-13582

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/24 4:15 a.m.•16 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS0.00308EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/24 4:15 a.m.•23 views

CVE-2025-13582

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

9.8CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/24 4:02 a.m.•38 views

CVE-2025-13582

The CVE affects Code-Projects Jonnys Liquor 1.0 where the GET Parameter Handler in /detail.php is vulnerable. Manipulating the Product argument enables SQL injection, enabling remote exploitation. The public exploit is reportedly available. No vendor/patch/version details are provided in the supp...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/24 4:02 a.m.•10 views

CVE-2025-13582 code-projects Jonnys Liquor GET Parameter detail.php sql injection

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/24 4:02 a.m.•35 views

CVE-2025-13582 code-projects Jonnys Liquor GET Parameter detail.php sql injection

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

7.5CVSS0.00387EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/24 4:02 a.m.•20 views

EUVD-2025-198604

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

7.5CVSS6.3AI score0.00387EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/11/24 3:32 a.m.•44 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS0.00308EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/24 3:16 a.m.•14 views

CVE-2025-13579

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

8.8CVSS5.7AI score0.00306EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/24 3:02 a.m.•12 views

CVE-2025-13580 code-projects Library System mail.php sql injection

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/24 2:32 a.m.•7 views

CVE-2025-13579 code-projects Library System return.php sql injection

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/11/24 1:32 a.m.•9 views

CVE-2025-13577

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS3.7AI score0.00217EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/11/24 1:15 a.m.•30 views

CVE-2025-13576

A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. Multiple endpoints...

8.8CVSS0.00285EPSS
SaveExploits0References5
NVD
NVD
•added 2025/11/24 1:15 a.m.•17 views

CVE-2025-13575

A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function categoryexists of the file /resources/functions/blog.php of the component Category Handler. Such manipulation of the argument name/field leads to sql injection. The attack may be performed from...

8.8CVSS0.00293EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/11/24 12:02 a.m.•6 views

CVE-2025-13574 code-projects Online Bidding System addcategory.php categoryadd unrestricted upload

A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit...

5.8CVSS5.3AI score0.00393EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/11/24 12:02 a.m.•32 views

CVE-2025-13574 code-projects Online Bidding System addcategory.php categoryadd unrestricted upload

A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit...

5.8CVSS0.00393EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•29 views

PT-2025-47872

Name of the Vulnerable Software and Affected Versions PHPGurukul Hostel Management System version 2.1 Description A cross site scripting issue exists in PHPGurukul Hostel Management System 2.1. The issue is located in an unknown function within the /register-complaint.php file. Manipulation of th...

5.4CVSS4.7AI score0.00217EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•18 views

PT-2025-47878

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack ...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•22 views

PT-2025-47869

Name of the Vulnerable Software and Affected Versions code-projects Blog Site version 1.0 Description A security issue exists in code-projects Blog Site 1.0 related to the Category Handler component. Manipulation of the argument name/field within the category exists function, located in the file...

8.8CVSS6.4AI score0.00293EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
•added 2025/11/24 12:00 a.m.•8 views

Mozilla Firefox DOM Component Bypass

Vulnerability of the DOM component: The Workers mechanism in Mozilla Firefox and Firefox ESR browsers is related to data protection vulnerabilities. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

6.4CVSS7.6AI score0.00275EPSS
SaveExploits0References12Affected Software4
Rows per page
Query Builder