Code-Projects Online Class and Exam Scheduling System 代码注入漏洞

Code-Projects Online Class and Exam Scheduling System is a Code-Projects open source online class and exam scheduling system. A code injection vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an incorrect manipulation of the parameter...

Code-Projects Blood Bank System 安全漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from an incorrect operation of the parameter Availibility that can lead to a cross-site scripting attack...

CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-23487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in odihost Easy Gallery simple-gallery-odihost allows Reflected XSS.This issue affects Easy Gallery: from n/a through = 1.4...

CVE-2025-25133 WordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in newbiesup WP Frontend Submit wp-frontend-submit allows Reflected XSS.This issue affects WP Frontend Submit: from n/a through = 1.1.0...

CVE-2025-23516 WordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainvireinfo Sale with Razorpay sell-with-razorpay allows Reflected XSS.This issue affects Sale with Razorpay: from n/a through = 1.0...

CVE-2025-23487 WordPress Easy Gallery plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in odihost Easy Gallery simple-gallery-odihost allows Reflected XSS.This issue affects Easy Gallery: from n/a through = 1.4...

MAL-2025-1746 Malicious code in business-kpi-manager-1.0.0 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-1874

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php...

CVE-2025-1875

The CVE-2025-1875 entry documents an SQL injection in 101news version 1.0, exploitable via the searchtitle parameter in search.php. The vulnerability is described across multiple sources and indicates a critical impact, but the provided materials do not specify an exploit method, affected platfor...

CVE-2025-1874 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php...

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. SourceCodester Best online news portal project version 1.0 has a SQL injection vulnerability, the vulnerability stems from the admin/add-category.php file has SQL injection...

CVE-2025-26047

Loggrove v1.0 is vulnerable to SQL Injection in the read.py file...

PT-2025-9110 · Loggrove · Loggrove

Name of the Vulnerable Software and Affected Versions: Loggrove version 1.0 Description: The issue concerns SQL Injection in the read.py file. Recommendations: For version 1.0, consider restricting access to the read.py file until a patch is available. As a temporary workaround, review and modify...

CVE-2025-26047

Loggrove v1.0 is affected by an SQL injection in the read.py file. CVSS 3.1 base score 5.1 (Medium); attack vector Local, no user interaction required, but privileges required: None; confidentiality and integrity impacts listed as Low, availability impact none. Affected component appears to be a ...

Loggrove 安全漏洞

Loggrove is a web platform service by olajowon individual developer. A security vulnerability exists in Loggrove v1.0, which stems from an SQL injection in the read.py file...

Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.4.2 release.

Red Hat Developer Hub 1.4.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

WordPress Countdown Timer plugin <= 1.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Countdown Timer versions = 1.0...