6119 matches found
EUVD-2025-36141
A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...
CVE-2025-12256 code-projects Online Event Judging System edit_contestant.php sql injection
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /editcontestant.php. Executing manipulation of the argument contestantid can lead to sql injection. The attack can be executed remotely. The exploit has been made...
CVE-2025-62974
CVE-2025-62974 affects the WordPress Headline Analyzer plugin (headline-analyzer) up to version 1.3.7. The issue is a Stored XSS due to improper neutralization of input during web page generation. Documents consistently describe the vulnerability as enabling stored cross-site scripting in Headlin...
CVE-2025-62951 WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icc0rz H5P h5p allows Stored XSS.This issue affects H5P: from n/a through = 1.16.0...
CVE-2025-62939 WordPress Open Currency Converter plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Open Currency Converter artiss-currency-converter allows Stored XSS.This issue affects Open Currency Converter: from n/a through = 1.5.0...
CVE-2025-62896 WordPress Multilang Contact Form plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in digitaldonkey Multilang Contact Form multilang-contact-form allows Stored XSS.This issue affects Multilang Contact Form: from n/a through = 1.5...
projectworlds Expense Management System 代码注入漏洞
Projectworlds Expense Management System is an open source expense management system from Projectworlds. A code injection vulnerability exists in version 1.0 of the projectworlds Expense Management System, which stems from an incorrect manipulation of an unknown function in the file...
PHPGurukul Curfew e-Pass Management System 代码注入漏洞
PHPGurukul Curfew e-Pass Management System is an electronic pass management system from PHPGurukul Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Curfew e-Pass Management System, which stems from an incorrect manipulation of the Fullname/Category parameter in the file...
SourceCodester Point of Sales SQL注入漏洞
SourceCodester Point of Sales is an open source point of sale system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Point of Sales version 1.0, which stems from incorrect manipulation of the parameter ID in the file /deletecategory.php, which could lead to a SQL...
Suishang Enterprise-Level B2B2C Multi-User Mall System 安全漏洞
Suishang Enterprise-Level B2B2C Multi-User Mall System is an e-commerce system software from China Suishang Company. A security vulnerability exists in Suishang Enterprise-Level B2B2C Multi-User Mall System version 1.0, which originates from the incorrect operation of the parameter categoryid in...
PT-2025-43916
Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Result System version 1.0 Description A security issue exists in SourceCodester Online Student Result System 1.0. The system is susceptible to SQL injection due to improper handling of the ID parameter within the...
PT-2025-43886
Name of the Vulnerable Software and Affected Versions projectworlds Expense Management System version 1.0 Description A security issue exists in the Expense Categories Page component of projectworlds Expense Management System. The issue involves an unknown function within the /public/admin/expens...
PT-2025-43792
Name of the Vulnerable Software and Affected Versions ClickSend SMS Contact Form 7 Notifications versions through 1.4.0 Description An authorization issue exists in ClickSend SMS Contact Form 7 Notifications. The issue involves incorrectly configured access control security levels, potentially...
EUVD-2025-35946
Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12216 Malicious / Malformed App can be Installed but not Uninstalled
Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
PT-2025-43734
Name of the Vulnerable Software and Affected Versions Azure Access OS BLU-IC2 versions through 1.19.5 Azure Access OS BLU-IC4 versions through 1.19.5 Description The software contains vulnerable components. Recommendations Azure Access OS BLU-IC2 versions prior to 1.19.5 should be updated. Azure...
EUVD-2025-35805
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.This issue affects Netty ERP: before V.1.1000...
CVE-2025-11253 SQLi in Aksis Technologies' Netty ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.0 Release.
Red Hat OpenShift Dev Spaces 3.24.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.24 release is based on...
