Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/12/03 12:26 a.m.•24 views

CVE-2025-60736

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...

9.8CVSS8AI score0.00469EPSS
SaveExploits2References1
OSV
OSV
•added 2025/12/02 7:15 p.m.•13 views

CVE-2025-60736

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...

9.8CVSS5.9AI score0.00469EPSS
SaveExploits2References1
NVD
NVD
•added 2025/12/02 7:15 p.m.•15 views

CVE-2025-60736

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...

9.8CVSS0.00469EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•12 views

Code-Projects Online Medicine Guide 安全漏洞

Code-Projects Online Medicine Guide is an online medicine guide from Code-Projects open source. A security vulnerability exists in version 1.0 of code-projects Online Medicine Guide, which stems from the upass parameter in /login.php being susceptible to SQL injection attacks...

9.8CVSS7.6AI score0.00469EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2025/12/02 12:00 a.m.•14 views

PT-2025-48740

Name of the Vulnerable Software and Affected Versions code-projects Online Medicine Guide version 1.0 Description The software is susceptible to a SQL Injection issue through the /login.php endpoint. The upass parameter is the entry point for this flaw. Recommendations Apply input validation and...

9.8CVSS7.5AI score0.00469EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•0 views

CVE-2025-60736: Improper Neutralization of Special Elements used in an SQL Command

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits2References1
CVE
CVE
•added 2025/12/02 12:00 a.m.•28 views

CVE-2025-60736

The Online Medicine Guide v1.0 by Code Projects is vulnerable to a critical SQL Injection flaw in the /login.php endpoint. The root cause is insufficient input validation and the direct concatenation of the upass parameter into SQL queries without using prepared statements. This allows unauthoriz...

7.6AI score0.00469EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2025/12/02 12:00 a.m.•26 views

CVE-2025-60736

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...

0.00469EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/12/02 12:00 a.m.•8 views

CVE-2025-60736

code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...

7.6AI score0.00469EPSS
SaveExploits2References1
GithubExploit
GithubExploit
•added 2025/10/03 4:33 p.m.•354 views

Exploit for CVE-2025-60736

CVE-2025-60736: SQL Injection Vulnerability in Online Medicine...

8.4AI score0.00469EPSS
SaveExploits2
Rows per page
Query Builder