CVE-2025-8952

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be...

CVE-2025-8952

CVE-2025-8952 affects Campcodes Online Flight Booking Management System 1.0. The vulnerability is in the login component, specifically the unknown functionality of /admin/ajax.php?action=login, where manipulating the Username parameter leads to an SQL injection. It can be executed remotely over t...

CVE-2025-8935

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935

CVE-2025-8935 affects the open-source product “1000 Projects Sales Management System” version 1.0. The vulnerability exists in an unknown functionality of the file /superstore/custcmp.php , where manipulating the Username parameter triggers a SQL injection. The impact is remote exploitation with ...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

Campcodes Online Flight Booking Management System 注入漏洞

CampCodes Online Flight Booking Management System is an online flight booking management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Flight Booking Management System version 1.0, which originates from a SQL injection due to the incorrect operation of t...

PT-2025-33359 · Sourcecodester · Sourcecodester Cashier Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A SQL injection issue exists in SourceCodester Cashier Queuing System 1.0 due to the manipulation of the Username argument in the /Actions.php file. This allows for remote...

SourceCodester Cashier Queuing System SQL注入漏洞

SourceCodester Cashier Queuing System is an open source cashier queuing system from SourceCodester. A security vulnerability exists in SourceCodester Cashier Queuing System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Username in the file...

itsourcecode Online Tour and Travel Management System 注入漏洞

itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system. An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which originates from a SQL injection due to incorrect...

PT-2025-33115 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability exists in an unknown functionality of the file /superstore/custcmp.php. Manipulation of the Username argument leads to a SQL injection. The attack can be launched...

1000 Projects Sales Management System 注入漏洞

1000 Projects Sales Management System is an open source sales management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Sales Management System, which is caused by a SQL injection due to incorrect manipulation of the parameter Username in the file...

PT-2025-33137 · Unknown · Campcodes Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Flight Booking Management System version 1.0. The vulnerability is located in an unknown functionality of the...

CVE-2012-10060

Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code...

CVE-2012-10060

Sysax Multi Server before 5.55 is vulnerable to a stack-based buffer overflow in its SSH service when a remote attacker supplies an overly long username during authentication. The input is copied into a fixed-size stack buffer without proper bounds checking, enabling remote code execution under t...

CVE-2012-10060 Sysax Multi Server < 5.55 SSH Username Buffer Overflow

Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code...

CVE-2012-10055

CVE-2012-10055 affects ComSndFTP FTP Server v1.3.7 Beta. The vulnerability is a format-string flaw in the handling of the USER command that can overwrite a hardcoded function pointer (WSACleanup from Ws2_32.dll) in memory, enabling an attacker to redirect control flow and bypass DEP via a ROP cha...

CVE-2025-8926

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8926

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...