Lucene search
+L

12535 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 12:10 p.m.13 views

CVE-2025-13276

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

7.5CVSS7.5AI score0.00302EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/18 6:58 a.m.16 views

CVE-2025-13267

A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS6.5AI score0.00367EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.25 views

CVE-2025-13253

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS7AI score0.00351EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.20 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.11 views

SourceCodester Train Station Ticketing System SQL注入漏洞

SourceCodester Train Station Ticketing System is SourceCodester open source a train station ticketing system. A SQL injection vulnerability exists in SourceCodester Train Station Ticketing System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file...

8.8CVSS7AI score0.00306EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.16 views

SourceCodester Train Station Ticketing System SQL注入漏洞

SourceCodester Train Station Ticketing System is SourceCodester open source a train station ticketing system. A SQL injection vulnerability exists in SourceCodester Train Station Ticketing System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file...

9.8CVSS7.8AI score0.00629EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/11/18 12:00 a.m.11 views

Student Information System /index.php File SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from a lack of security filtering of the Username parameter in the /index.php file. No details of the vulnerability are available at this time...

9.8CVSS7.7AI score0.00435EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/18 12:00 a.m.10 views

Simple Cafe Ordering System login.php File SQL Injection Vulnerability

Simple Cafe Ordering System is a simple coffee ordering system. The Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from the /login.php file not securely filtering the Username parameter. An attacker can exploit this vulnerability to remotely obtain sensitiv...

9.8CVSS7.6AI score0.0046EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/18 12:00 a.m.6 views

Inventory Management System /LogSignModal.PHP File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that originates from improper handling of the UUSERNAME parameter in the /LogSignModal.PHP file. No details of the vulnerability are available at this time...

9.8CVSS8.1AI score0.00383EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/11/18 12:00 a.m.12 views

PT-2025-47302

Name of the Vulnerable Software and Affected Versions SourceCodester Train Station Ticketing System version 1.0 Description A SQL injection weakness exists in the Train Station Ticketing System. This issue is related to the manipulation of the Username argument within the login functionality,...

7.5CVSS7.3AI score0.00629EPSS
SaveExploits1References8
NVD
NVD
added 2025/11/17 7:16 p.m.10 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

6.5CVSS0.0024EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/17 6:30 p.m.8 views

EUVD-2024-55093

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/17 5:15 p.m.12 views

CVE-2024-44652

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/17 4:48 p.m.6 views

CVE-2025-12764

pgAdmin = 9.9 is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing the DC/LDAP server and the client to process an unusual amount of data DOS...

7.5CVSS7.2AI score0.00394EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/17 3:30 p.m.10 views

EUVD-2025-197800

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

7.5CVSS6.6AI score0.00415EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/11/17 3:30 p.m.12 views

EUVD-2025-197791

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00384EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/17 2:15 p.m.13 views

CVE-2025-13285

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

9.8CVSS0.00415EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/17 1:15 p.m.11 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.7AI score0.00384EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/17 1:15 p.m.14 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS0.00384EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/17 1:02 p.m.22 views

CVE-2025-13280

CVE-2025-13280 affects CodeAstro Simple Inventory System 1.0, specifically the Login component’s /index.php where manipulating the Username parameter enables SQL injection. Multiple connected sources confirm the flaw is exploitable remotely and that exploits have been publicly disclosed. The vuln...

9.8CVSS7.2AI score0.00384EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder