Lucene search
+L

1114 matches found

NVD
NVD
added 2025/09/01 5:15 a.m.14 views

CVE-2025-9763

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /studentsignup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be...

9.8CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/01 5:02 a.m.46 views

CVE-2025-9763

CVE-2025-9763 affects Campcodes Online Learning Management System v1.0. The vulnerability is an SQL injection in the file /student_signup.php triggered by manipulating the Username parameter, allowing remote exploitation. Public exploits have been observed. Impact is reported as high/critical acr...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/09/01 4:15 a.m.9 views

CVE-2025-9759

A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS5.8AI score0.00415EPSS
SaveExploits1References4
NVD
NVD
added 2025/09/01 4:15 a.m.25 views

CVE-2025-9759

A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS0.00415EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/09/01 3:32 a.m.30 views

CVE-2025-9759 Campcodes/SourceCodester Courier Management System ajax.php signup sql injection

A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS0.00415EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/09/01 3:32 a.m.5 views

CVE-2025-9759 Campcodes/SourceCodester Courier Management System ajax.php signup sql injection

A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS6.9AI score0.00415EPSS
SaveExploits1References4
CVE
CVE
added 2025/09/01 3:32 a.m.29 views

CVE-2025-9759

CVE-2025-9759 affects Campcodes/SourceCodester Courier Management System v1.0. The vulnerable component is the Signup function in /ajax.php, where manipulation of the lastname parameter results in a SQL injection. Attacks can be executed remotely and exploits have been publicized. Public-facing C...

9.8CVSS7.4AI score0.00415EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.9 views

PT-2025-35444

Name of the Vulnerable Software and Affected Versions: Campcodes/SourceCodester Courier Management System version 1.0 Description: A security flaw has been discovered in the Signup function of the /ajax.php file, which results in SQL injection. Manipulation of the lastname argument can initiate t...

9.8CVSS7.5AI score0.00415EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.12 views

CampCodes Online Learning Management System 安全漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Online Learning Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter Userna...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.9 views

PT-2025-35496

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Learning Management System version 1.0. The issue is located in the /teacher signup.php file, within an unknown function...

9.8CVSS7.5AI score0.00417EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-5493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier fo...

7.5CVSS7.1AI score0.02886EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/23 2:30 p.m.16 views

CVE-2025-9302

A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/22 7:15 p.m.7 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

9.8CVSS0.00409EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/22 12:00 a.m.4 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

8.6AI score0.00409EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.11 views

Secure LogIn and SignUp API in PHP 安全漏洞

Secure LogIn and SignUp API in PHP is a security interface software by Vishnu Sivadas Individual Developer. A security vulnerability exists in Secure LogIn and SignUp API in PHP, which stems from an insecure SQL query construct in DataBase.php that could lead to SQL injection...

9.8CVSS7.4AI score0.00409EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.9 views

PT-2025-34487 · Vishnusivadasvs · Login-Signup

Name of the Vulnerable Software and Affected Versions: LogIn-SignUp project by VishnuSivadasVS affected versions not specified Description: The LogIn-SignUp project is susceptible to SQL Injection due to the construction of SQL queries in the DataBase.php file. The logIn and signUp functions...

9.8CVSS8.3AI score0.00409EPSS
SaveExploits0References6
CVE
CVE
added 2025/08/22 12:00 a.m.35 views

CVE-2025-51092

The CVE-2025-51092 entry concerns the LogIn-SignUp project by VishnuSivadasVS. The underlying issue is SQL Injection due to unsafe SQL query construction in DataBase.php: logIn() and signUp() concatenate user input and unvalidated table names instead of using prepared statements. Although a prepa...

9.8CVSS8.3AI score0.00409EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/08/21 6:15 p.m.33 views

CVE-2025-52352

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 provides a configuration to disable user sign-up in distributed deployments by hiding the sign-up option on the login page UI. However, the sign-up API endpoint remains publicly accessible and functional, allowing unauthenticated users to...

9.8CVSS0.00572EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/21 2:15 p.m.24 views

CVE-2025-9302

A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS0.00421EPSS
SaveExploits1References5
OSV
OSV
added 2025/08/21 2:15 p.m.14 views

CVE-2025-9302

A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
Rows per page
Query Builder