Lucene search
+L

577 matches found

Cvelist
Cvelist
•added 2025/12/19 1:32 p.m.•58 views

CVE-2025-14950 code-projects Scholars Tracking System delete_post.php sql injection

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

7.5CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/19 1:32 p.m.•35 views

CVE-2025-14950

Code-projects Scholars Tracking System 1.0 is affected by an SQL injection in the delete_post.php handler. The vulnerability stems from improper handling of the ID parameter in the delete_post.php route, permitting remote exploitation. Multiple sources confirm that the exploit has been publicly r...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2025/12/19 1:32 p.m.•13 views

CVE-2025-14950

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

9.8CVSS5.3AI score0.00387EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/12/19 4:16 a.m.•13 views

CVE-2025-14940

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/deleteuser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/19 4:16 a.m.•23 views

CVE-2025-14940

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/deleteuser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS0.00387EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/19 4:02 a.m.•19 views

EUVD-2025-204439

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/deleteuser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

7.5CVSS6.5AI score0.00387EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/12/19 4:02 a.m.•54 views

CVE-2025-14940 code-projects Scholars Tracking System delete_user.php sql injection

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/deleteuser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

7.5CVSS0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•19 views

Code-Projects Scholars Tracking System SQL注入漏洞

Code-Projects Scholars Tracking System is an open source scholars tracking system by Code-Projects. A SQL injection vulnerability exists in Code-Projects Scholars Tracking System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /deletepost.php, which could lead...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•5 views

CVE-2025-14940: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/deleteuser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•6 views

CVE-2025-14950: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•9 views

CVE-2025-14951: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•26 views

PT-2025-52411

Name of the Vulnerable Software and Affected Versions Scholars Tracking System version 1.0 Description A SQL injection issue exists in Scholars Tracking System 1.0. The issue is located in the /admin/delete user.php file, specifically within an unknown function. Manipulation of the ID argument ca...

9.8CVSS7.6AI score0.00387EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•15 views

Code-Projects Scholars Tracking System 安全漏洞

Code-Projects Scholars Tracking System is an open source scholars tracking system by Code-Projects. A security vulnerability exists in Code-Projects Scholars Tracking System version 1.0, which stems from an incorrect manipulation of the parameter postcontent in the file /home.php, which could lea...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•24 views

Code-Projects Scholars Tracking System SQL注入漏洞

Scholars Tracking System is a scholars tracking system. Scholars Tracking System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter ID in file /admin/deleteuser.php. An attacker can exploit this vulnerability to...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•24 views

PT-2025-52449

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument post content leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/12/18 12:36 a.m.•27 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS8.1AI score0.00203EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/17 6:31 p.m.•24 views

EUVD-2025-203900

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS7.5AI score0.00203EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/12/17 5:15 p.m.•19 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS5.8AI score0.00203EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/17 5:15 p.m.•21 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS0.00203EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/17 12:00 a.m.•51 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

0.00203EPSS
SaveExploits1References1
Rows per page
Query Builder