Lucene search
K

12 matches found

CNVD
CNVD
added 2025/10/15 12:0 a.m.2 views

Online Complaint Site index.php File SQL Injection Vulnerability

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in file /cms/users/index.php. An attacker can exploit this vulnerability...

8.8CVSS8.2AI score0.0004EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.2 views

CVE-2025-11514

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...

8.8CVSS7.1AI score0.0004EPSS
Exploits1References1
OSV
OSV
added 2025/10/09 1:15 a.m.1 views

CVE-2025-11514

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...

8.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/10/09 12:2 a.m.7 views

CVE-2025-11514 code-projects Online Complaint Site index.php sql injection

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...

6.5CVSS0.0004EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/09 12:2 a.m.2 views

CVE-2025-11514 code-projects Online Complaint Site index.php sql injection

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...

6.5CVSS6.8AI score0.0004EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.3 views

PT-2025-41322

Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A flaw exists in code-projects Online Complaint Site 1.0 that allows for SQL injection. This occurs through manipulation of the Username argument in the file '/cms/users/index.php'. T...

8.8CVSS6.3AI score0.0004EPSS
Exploits1References11
CNVD
CNVD
added 2025/09/29 12:0 a.m.3 views

Hostel Management System mod_users/index.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /justines/admin/modusers/index.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00046EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.2 views

CampCodes Advanced Online Voting System 注入漏洞

CampCodes Advanced Online Voting System is an advanced online voting system from CampCodes, Inc. An injection vulnerability exists in Campcodes Advanced Online Voting System version 1.0, which stems from improper handling of the parameter Username in the file /users/index.php, which could lead to...

9.8CVSS7.8AI score0.00277EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.2 views

Complete File Management System SQL Injection Vulnerability

Complete File Management System is a file management system by nelzkie15 Personal Developer. A SQL injection vulnerability exists in SourceCodester Complete File Management System version 1.0, which originates from a SQL injection vulnerability in the users/index.php file of the component Login...

9.8CVSS8.1AI score0.00084EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.3 views

PT-2024-18346 · Sourcecodester · Sourcecodester Complete File Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complete File Management System version 1.0 Description: A critical issue was found in the Login Form component of the affected software, specifically in the file users/index.php. The username argument is vulnerable to...

9.8CVSS7.7AI score0.00084EPSS
Exploits1References8
OSV
OSV
added 2021/03/24 1:15 p.m.2 views

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

4.8CVSS5.8AI score0.00179EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.2 views

Bitweaver 跨站脚本漏洞

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/index.php URI...

4.8CVSS5AI score0.00179EPSS
Exploits1References1
Rows per page
Query Builder