Lucene search
+L

15935 matches found

osv_cve
osv_cve
•added 2025/10/27 7:15 a.m.•24 views

CVE-2025-12238

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS5.7AI score0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 6:32 a.m.•37 views

CVE-2025-12238 code-projects Automated Voting System user.php sql injection

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

6.5CVSS0.00335EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 6:32 a.m.•20 views

EUVD-2025-36099

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS6.3AI score0.00335EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/10/27 6:32 a.m.•11 views

CVE-2025-12238 code-projects Automated Voting System user.php sql injection

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

6.5CVSS6.5AI score0.00335EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•20 views

EUVD-2025-36066

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

7.5CVSS6.5AI score0.00478EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/10/27 3:15 a.m.•19 views

CVE-2025-12208

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 3:02 a.m.•13 views

CVE-2025-12208 SourceCodester Best House Rental Management System admin_class.php login2 sql injection

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•20 views

Code-Projects Automated Voting System SQL注入漏洞

Code-Projects Automated Voting System is a Code-Projects open source automated voting system. Code-Projects Automated Voting System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /admin/user.php, which could lead...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-12292: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•26 views

PT-2025-43894

Name of the Vulnerable Software and Affected Versions code-projects Automated Voting System version 1.0 Description A security flaw exists in code-projects Automated Voting System 1.0. The issue involves a SQL injection that occurs through manipulation of the Username argument within an unknown...

8.8CVSS7.3AI score0.00335EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•16 views

PT-2025-43976

Name of the Vulnerable Software and Affected Versions SourceCodester Point of Sales version 1.0 Description A flaw exists in SourceCodester Point of Sales 1.0 where manipulation of the Username argument in the file '/index.php' can lead to SQL injection. This issue can be exploited remotely. The...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•7 views

CVE-2025-12238: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS6.5AI score0.00335EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•21 views

PT-2025-43901

Name of the Vulnerable Software and Affected Versions code-projects Simple E-Banking System version 1.0 Description A flaw exists in code-projects Simple E-Banking System 1.0, specifically within the /eBank/register.php file. Manipulation of the Username argument can result in cross site scriptin...

6.1CVSS5.4AI score0.00395EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-12244: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...

6.1CVSS3.7AI score0.00395EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•18 views

SourceCodester Best House Rental Management System SQL注入漏洞

SourceCodester Best House Rental Management System is SourceCodester open source a house rental management system . SourceCodester Best House Rental Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the incorrect operation of the parameter Username of t...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-12208: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•20 views

Code-Projects Simple E-Banking System 代码注入漏洞

Code-Projects Simple E-Banking System is a simple e-banking system from Code-Projects. A code injection vulnerability exists in Code-Projects Simple E-Banking System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /eBank/register.php, which could lead...

6.1CVSS4.9AI score0.00395EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/24 5:33 p.m.•33 views

CVE-2025-34155

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

6.9CVSS6AI score0.00526EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/24 12:00 a.m.•41 views

CVE-2025-46185

An Insecure Permission vulnerability exists in pgcodekeeper version 10.12.0 . The root cause is the plaintext storage of sensitive information, specifically passwords and usernames . A local attacker can exploit this flaw to obtain these credentials. Currently, there is no information available r...

6.2CVSS5.9AI score0.00138EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•9 views

PT-2025-43532

Name of the Vulnerable Software and Affected Versions Tibbo AggreGate Network Manager versions prior to 6.40.05 Description The login functionality exhibits a discrepancy in authentication failure messages. These messages vary depending on whether a provided username exists, potentially enabling ...

6.9CVSS5.9AI score0.00526EPSS
SaveExploits0References6
Rows per page
Query Builder