Lucene search
+L

2969 matches found

NVD
NVD
•added 2025/11/18 12:15 p.m.•19 views

CVE-2025-13344

A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit ha...

9.8CVSS0.00683EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/11/18 12:10 p.m.•21 views

CVE-2025-13276

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

7.5CVSS7.5AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•37 views

CVE-2025-13253

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•15 views

Inventory Management System /LogSignModal.PHP File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that originates from improper handling of the UUSERNAME parameter in the /LogSignModal.PHP file. No details of the vulnerability are available at this time...

9.8CVSS7.2AI score0.00415EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•25 views

PT-2025-47302

Name of the Vulnerable Software and Affected Versions SourceCodester Train Station Ticketing System version 1.0 Description A SQL injection weakness exists in the Train Station Ticketing System. This issue is related to the manipulation of the Username argument within the login functionality,...

7.5CVSS7AI score0.00683EPSS
SaveExploits1References8
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•20 views

Student Information System /index.php File SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from a lack of security filtering of the Username parameter in the /index.php file. No details of the vulnerability are available at this time...

9.8CVSS7.2AI score0.00472EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•18 views

Simple Cafe Ordering System login.php File SQL Injection Vulnerability

Simple Cafe Ordering System is a simple coffee ordering system. The Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from the /login.php file not securely filtering the Username parameter. An attacker can exploit this vulnerability to remotely obtain sensitiv...

9.8CVSS7.2AI score0.005EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•21 views

SourceCodester Train Station Ticketing System SQL Injection Vulnerability

SourceCodester Train Station Ticketing System is SourceCodester open source a train station ticketing system. A SQL injection vulnerability exists in SourceCodester Train Station Ticketing System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file...

8.8CVSS6.5AI score0.00332EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•29 views

SourceCodester Train Station Ticketing System SQL Injection Vulnerability

SourceCodester Train Station Ticketing System is SourceCodester open source a train station ticketing system. A SQL injection vulnerability exists in SourceCodester Train Station Ticketing System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file...

9.8CVSS7.1AI score0.00683EPSS
SaveExploits1References6
NVD
NVD
•added 2025/11/17 7:16 p.m.•21 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

6.5CVSS0.00258EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/17 2:15 p.m.•21 views

CVE-2025-13285

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

9.8CVSS0.00451EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/11/17 1:15 p.m.•16 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/11/17 1:02 p.m.•18 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/11/17 11:02 a.m.•41 views

CVE-2025-13276

CVE-2025-13276 affects g33kyrash Online-Banking-System. The vulnerability is a SQL injection in the /index.php file caused by manipulating the Username parameter. It is remotely exploitable and has public exploit code. Version details for affected and updated releases are not available due to rol...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/17 11:02 a.m.•11 views

CVE-2025-13276 g33kyrash Online-Banking-System index.php sql injection

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/11/17 8:32 a.m.•21 views

EUVD-2025-197776

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS7AI score0.00421EPSS
SaveExploits1References6
CVE
CVE
•added 2025/11/17 8:32 a.m.•45 views

CVE-2025-13271

Campcodes School Fees Payment Management System 1.0 is affected by a SQL injection in /ajax.php?action=login, caused by unsafely handling the Username parameter. Multiple connected sources (CNVD-2026-05370, RH:CVE-2025-13271, CNNVD-202511-1928, CVE-2025-13271 listings, and PT-2025-47133) confirm ...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/17 7:03 a.m.•30 views

CVE-2025-13241

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS7.1AI score0.00472EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/17 12:30 a.m.•21 views

EUVD-2025-197733

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•29 views

g33kyrash Online Banking System SQL Injection Vulnerability

g33kyrash Online Banking System is an online banking system developed using PHP and MySQL by the individual developer of g33kyrash. A SQL injection vulnerability exists in g33kyrash Online Banking System, which stems from an incorrect manipulation of the parameter Username in the file /index.php,...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References5
Rows per page
Query Builder