Lucene search
+L

2969 matches found

Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•27 views

PT-2025-44066

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A flaw exists in Campcodes Retro Basketball Shoes Online Store 1.0 related to the file /admin/admin index.php. Manipulation of the Username argument can lead to a SQL...

9.8CVSS7.3AI score0.00463EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/10/28 12:00 a.m.•18 views

CampCodes Retro Basketball Shoes Online Store has a SQL injection vulnerability

CampCodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from CampCodes, Inc. A SQL injection vulnerability exists in CampCodes Retro Basketball Shoes Online Store version 1.0, which stems from incorrect manipulation of the parameter Username in the file...

9.8CVSS7.1AI score0.00463EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/27 6:31 p.m.•22 views

EUVD-2025-36199

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/10/27 4:15 p.m.•17 views

CVE-2025-12292

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 4:15 p.m.•19 views

CVE-2025-12292

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

9.8CVSS0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 3:32 p.m.•11 views

CVE-2025-12292 SourceCodester Point of Sales index.php sql injection

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 8:15 a.m.•23 views

CVE-2025-12244

A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...

6.1CVSS0.00395EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 7:15 a.m.•22 views

CVE-2025-12238

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 6:32 a.m.•40 views

CVE-2025-12238 code-projects Automated Voting System user.php sql injection

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

6.5CVSS0.00335EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 6:32 a.m.•21 views

EUVD-2025-36099

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS6.5AI score0.00335EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•21 views

EUVD-2025-36066

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

7.5CVSS7.1AI score0.00478EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•19 views

PT-2025-43976

Name of the Vulnerable Software and Affected Versions SourceCodester Point of Sales version 1.0 Description A flaw exists in SourceCodester Point of Sales 1.0 where manipulation of the Username argument in the file '/index.php' can lead to SQL injection. This issue can be exploited remotely. The...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•22 views

PT-2025-43901

Name of the Vulnerable Software and Affected Versions code-projects Simple E-Banking System version 1.0 Description A flaw exists in code-projects Simple E-Banking System 1.0, specifically within the /eBank/register.php file. Manipulation of the Username argument can result in cross site scriptin...

6.1CVSS3.7AI score0.00395EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•19 views

SourceCodester’s Best House Rental Management System has a SQL injection vulnerability

SourceCodester Best House Rental Management System is SourceCodester open source a house rental management system . SourceCodester Best House Rental Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the incorrect operation of the parameter Username of t...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•22 views

Code-Projects Automated Voting System SQL Injection Vulnerability

Code-Projects Automated Voting System is a Code-Projects open source automated voting system. Code-Projects Automated Voting System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /admin/user.php, which could lead...

8.8CVSS6.5AI score0.00335EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•23 views

Code-Projects Simple E-Banking System Code Injection Vulnerabilities

Code-Projects Simple E-Banking System is a simple e-banking system from Code-Projects. A code injection vulnerability exists in Code-Projects Simple E-Banking System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /eBank/register.php, which could lead...

6.1CVSS4.9AI score0.00395EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/10/22 12:00 a.m.•18 views

Tenda AC18 WAN1 PPoe Userid DoS

The vulnerability of the “wan1.ppoe.userid” configuration in the Tenda AC18 router’s microprogramming software is related to the issue of writing operations outside the buffer during the processing of the “username” parameter for the final destination /goform/fastsettingpppoeset. Exploiting this...

9CVSS8.6AI score0.00817EPSS
SaveExploits1References4
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•20 views

E-Banking System SQL Injection Vulnerability

E-Banking System is an electronic banking system. E-Banking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters username/password in the file /register.php. An attacker can exploit this vulnerability ...

9.8CVSS7.5AI score0.00478EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•24 views

UTT 1250GW Buffer Overflow Vulnerability

The UTT 1250GW is an enterprise-grade wireless router from Atech Technology Ltd. designed for SOHO Small Office/Home Office environments, focusing on wireless coverage and network management features. The UTT 1250GW suffers from a buffer overflow vulnerability, which originates from the parameter...

9CVSS8.7AI score0.0077EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•22 views

Online Complaint Site index.php File SQL Injection Vulnerability

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in file /cms/users/index.php. An attacker can exploit this vulnerability...

8.8CVSS6.9AI score0.00389EPSS
SaveExploits1References1
Rows per page
Query Builder