Lucene search
+L

85 matches found

osv_cve
osv_cve
•added 2025/10/10 8:15 p.m.•29 views

CVE-2025-11582

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/10 8:02 p.m.•17 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS7AI score0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/10 8:02 p.m.•41 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/10 8:02 p.m.•43 views

CVE-2025-11582

The CVE-2025-11582 entry maps to concrete details across multiple sources: code-projects Online Job Search Engine 1.0 is affected by a SQL injection in the /registration.php script, via manipulation of the txtusername parameter. This is reported as exploitable remotely with public exploits. The C...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•20 views

Code-Projects Online Job Search Engine security vulnerabilities

Online Job Search Engine is an online job search engine. Online Job Search Engine suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter txtusername in the file /registration.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•10 views

CVE-2025-11582: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2007-0581

Malware in sbrugna...

4.3CVSS6.4AI score0.01729EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2010-2721

Malware in sbrugna...

4.3CVSS6.4AI score0.01062EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•11 views

CVE-2025-5704: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/User.php. The manipulation of the argument txtUserName leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS7AI score0.0048EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/09 12:00 a.m.•10 views

CVE-2025-4469: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...

5.4CVSS3.8AI score0.00647EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/13 9:15 p.m.•49 views

CVE-2024-45876

The login form of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.283.4 at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries...

6.5CVSS0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•8 views

PT-2024-31828

Name of the Vulnerable Software and Affected Versions baltic-it TOPqw Webportal versions 1.35.283.2 through 1.35.283.3 Description The login form of the baltic-it TOPqw Webportal at "/Apps/TOPqw/Login.aspx" is vulnerable to SQL injection. The vulnerability exists in the txtUsername parameter, whi...

6.5CVSS5.7AI score0.00345EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•7 views

CVE-2024-45876: Improper Neutralization of Special Elements used in an SQL Command

The login form of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.283.4 at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries...

6.5CVSS5.9AI score0.00345EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•18 views

Code-Projects Courier Management System SQL Injection Vulnerability

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that originates from improper handling of the txtusername parameter in the /login.php file. An attacker could exploit this vulnerability to disclose sensitive information...

9.8CVSS7.4AI score0.00698EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•16 views

PT-2024-16403 · Code Projects · Code-Projects Courier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Courier Management System version 1.0 Description: A critical issue affects the processing of the file /login.php, where the manipulation of the txtusername argument leads to SQL injection. The attack may be initiated remotely...

9.8CVSS8.4AI score0.00698EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•4 views

CVE-2024-10608: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/02/23 12:00 a.m.•25 views

PT-2024-18348

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0 Description A critical issue was found in the system, affecting some unknown functionality of the file /Account/login.php. The manipulation of the txtusername argument leads to sql injectio...

9.8CVSS7.7AI score0.00908EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•23 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is SourceCodester open source php-based system for employee performance management . SourceCodester Employee Management System version 1.0 there is an injection vulnerability , the vulnerability stems from /Account/login.php in the existence of some unkno...

9.8CVSS7.9AI score0.00908EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•12 views

CVE-2024-1833: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Account/login.php. The manipulation of the argument txtusername/txtphone leads to sql injection. The attack may be launched...

9.8CVSS5.5AI score0.00908EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/29 5:15 p.m.•36 views

Sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be launched remotely. T...

7.5CVSS7.6AI score0.0076EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder