5839 matches found
CVE-2025-3332
A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/menusave.php. The manipulation of the argument menu leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2025-3331
A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the file /paymentsave.php. The manipulation of the argument mode leads to sql injection. The attack may be initiated remotely. T...
CVE-2025-3330
A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservationsave.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely. The exploit has...
Online Restaurant Management System SQL注入漏洞
Online Restaurant Management System is a Code-projects open source online restaurant management system. A SQL injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of the parameter mode in the /paymentsave.php file, which may le...
Online Restaurant Management System 注入漏洞
Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of the parameter Name in the /admin/usersave.php file, which can le...
Online Restaurant Management System 安全漏洞
Online Restaurant Management System is a Code-projects open source online restaurant management system. A security vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of the parameter ID in the /admin/paymentsave.php file, which may lea...
Code-Projects Online Restaurant Management System 安全漏洞
Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A security vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which stems from the mishandling of the parameter last in the /admin/membersave.p...
Code-Projects Online Restaurant Management System 安全漏洞
Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A security vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which originates from the improper handling of the parameter Category in the file...
Code-Projects Online Restaurant Management System SQL注入漏洞
Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A SQL injection vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which stems from improper handling of the parameter first in the...
CVE-2025-3298
A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...
CVE-2025-3297
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...
CVE-2025-3173
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack...
CVE-2025-3173 Project Worlds Online Lawyer Management System save_booking.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack...
Exploit for SQL Injection in Glpi-Project Glpi
CVE-2025-24799 SQLi Scanner A fast SQL injection vulnerabilit...
Cross-site Scripting (XSS)
Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the Save function. An attacker with page editing privileges can inject malicious HTML content by manipulating the content argument. Details Cross-site...
PT-2025-13642
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue affects the Save function of the Feature Link Block Handler component. The manipulation of the Title/Body Source/Button Text argument leads to cross-site scripting. This issue ca...
PT-2025-13639
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS, affecting the Save function of the HTML Block Handler component. The manipulation of the content argument leads to HTML injection. This issue can be initiat...
PT-2025-13638
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in the function Save of the component Content Block Handler, where the manipulation of the argument Source leads to cross-site scripting. The attack may be launched remotel...