895 matches found
CVE-2025-11480
A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...
PT-2025-41462
Name of the Vulnerable Software and Affected Versions Simple Leave Manager version 1.0 Description A SQL injection issue exists in the Simple Leave Manager 1.0 application. The flaw is located in the /user.php file and stems from improper handling of user-supplied input within the argument table,...
EUVD-2025-33160
A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...
CVE-2025-11477
Summary: CVE-2025-11477 affects SourceCodester Wedding Reservation Management System 1.0. The flaw occurs in /global.php where manipulation of the User parameter enables a SQL injection. The vulnerability can be exploited remotely and exploits have been released publicly. Multiple connected sourc...
CVE-2025-11357
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
CVE-2025-11313
Tipray Data Leakage Prevention System 1.0 has a SQL injection in findRolePage.do (findRolePage) caused by improper handling of the sort parameter. The flaw can be exploited remotely; exploit published. Vendor contact noted with no response. No remediation details are provided in the supplied docu...
CVE-2025-11312 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findModulePage.do findModulePage sql injection
A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findModulePage of the file findModulePage.do. The manipulation of the argument sort results in sql injection. The attack can be launched remotely. The exploit is now public...
EUVD-2025-32450
A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...
CVE-2025-61605
WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...
EUVD-2022-52294
Malicious code in bioql PyPI...
EUVD-2025-30780
Malicious code in bioql PyPI...
EUVD-2025-24685
Malicious code in bioql PyPI...
EUVD-2025-25613
Malicious code in bioql PyPI...
EUVD-2025-30399
Malicious code in bioql PyPI...
EUVD-2025-25492
Malicious code in bioql PyPI...
EUVD-2025-25448
Malicious code in bioql PyPI...
EUVD-2025-24882
Malicious code in bioql PyPI...
EUVD-2025-24784
Malicious code in bioql PyPI...