Lucene search
K

5715 matches found

NVD
NVD
added 2025/12/30 11:15 p.m.5 views

CVE-2023-54163

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking...

8.8CVSS0.00295EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/30 10:41 p.m.2 views

CVE-2022-50694 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through the username parameter to bypass authentication and potentially access...

9.8CVSS8AI score0.00815EPSS
Exploits2References5
EUVD
EUVD
added 2025/12/30 8:2 p.m.3 views

EUVD-2025-205856

A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/addadmin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published...

7.5CVSS6.4AI score0.00333EPSS
Exploits1References6
EUVD
EUVD
added 2025/12/30 4:51 p.m.3 views

EUVD-2025-205803

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Appointify allows Blind SQL Injection.This issue affects Appointify: from n/a through 1.0.8...

7.6CVSS7.1AI score0.00304EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/30 12:30 p.m.3 views

EUVD-2025-205746

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows Blind SQL Injection.This issue affects BWL Pro Voting Manager: from n/a through = 1.4.9...

9.8CVSS7.1AI score0.00253EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/30 11:47 a.m.5 views

CVE-2025-15186

A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7AI score0.00326EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/30 12:2 a.m.4 views

CVE-2025-15211 code-projects Refugee Food Management System refugee.php sql injection

A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulation of the argument refNo/Fname/Lname/sex/age/contact/nationalitynid can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS6.6AI score0.00315EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.8 views

PT-2025-53829

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A flaw exists in Refugee Food Management System 1.0 that allows for SQL injection. Manipulation of the arguments refNo, Fname, Lname, sex, age, contact, and nationality nid can lead to a...

9.8CVSS7.4AI score0.00315EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.5 views

Code-Projects Simple Stock System SQL注入漏洞

Code-Projects Simple Stock System is a Code-Projects open source simple stock system. Code-Projects Simple Stock System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /market/login.php, which can lead to SQL...

9.8CVSS7.8AI score0.00412EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.4 views

PT-2025-53862

Name of the Vulnerable Software and Affected Versions Simple Stock System version 1.0 Description A flaw exists in Simple Stock System that allows for SQL injection. This occurs through manipulation of the Username argument in the file /market/login.php. The attack can be launched remotely. The...

9.8CVSS7AI score0.00412EPSS
Exploits1References10
CVE
CVE
added 2025/12/29 10:2 p.m.16 views

CVE-2025-15207

CVE-2025-15207 affects Campcodes Supplier Management System 1.0, specifically the file /admin/view_products.php where manipulating the parameter chkId[] enables a SQL injection. Multiple connected documents corroborate remote exploitation and public disclosure of the exploit. Root cause is unsafe...

9.8CVSS7.3AI score0.00434EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/12/29 10:15 a.m.2 views

CVE-2025-15183

A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tfid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.7AI score
Exploits0References8
OSV
OSV
added 2025/12/29 1:15 a.m.6 views

CVE-2025-15165

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00326EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.5 views

PT-2025-53756

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description A flaw exists in code-projects Assessment Management 1.0, specifically within the file login.php. Manipulation of the userid argument can lead to SQL injection. This issue is remotely...

7.5CVSS6.9AI score0.00393EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.3 views

Code-Projects Refugee Food Management System SQL注入漏洞

Code-Projects Refugee Food Management System is an open source refugee food management system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Refugee Food Management System version 1.0, which stems from incorrect manipulation of the parameter tfid in the file...

9.8CVSS7.9AI score0.00412EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.5 views

BiggiDroid Simple PHP CMS SQL注入漏洞

BiggiDroid Simple PHP CMS is a content management system from BiggiDroid open source. A SQL injection vulnerability exists in BiggiDroid Simple PHP CMS version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/editsite.php, which can lead to SQL injection...

7.2CVSS5.7AI score0.00387EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.4 views

PT-2025-53710

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A security issue exists in code-projects Refugee Food Management System 1.0. The manipulation of the tfid argument in the file '/home/viewtakenfd.php' leads to a SQL injection. The attack...

9.8CVSS6.7AI score0.00412EPSS
Exploits0References13
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.6 views

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

7.5CVSS7.6AI score0.00329EPSS
Exploits1References10
OSV
OSV
added 2025/12/28 4:15 p.m.1 views

CVE-2025-15143

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

7.2CVSS5.6AI score0.00329EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/28 12:0 a.m.3 views

Online MCQ EXAM SQL注入漏洞

Online MCQ EXAM is an online exam website by Saif Hassan, an individual developer. Online MCQ EXAM suffers from a SQL injection vulnerability that stems from the incorrect manipulation of the parameters ans1/ans2 in the file /admin/quesadd.php, which could lead to SQL injection...

7.5CVSS7.7AI score0.0026EPSS
Exploits0References6
Rows per page
Query Builder