WordPress Tock Widget Plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Tock Widget versions = 1.1...

WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

CSRF Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso Patchstack Alliance in WordPress Plugin Virtual Bot versions = 1.0.0...

Code-Projects Online Book Shop 安全漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the s parameter of the /searchresult.php page...

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /detail.php page...

PT-2025-1757 · WordPress · Role Includer

Name of the Vulnerable Software and Affected Versions: Role Includer plugin for WordPress versions up to, and including, 1.6 Description: The issue is related to Reflected Cross-Site Scripting via the user id parameter due to insufficient input sanitization and output escaping. This allows...

SourceCodester Home Clean Services Management System 安全漏洞

SourceCodester Home Clean Services Management System is an open source home cleaning services management system from SourceCodester. A security vulnerability exists in SourceCodester Home Clean Services Management System version 1.0, which originates from the type/length/business parameter in the...

Code-Projects Online Book Shop 安全漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the usernm parameter of the /processlogin.php page...

Vehicle Management System SQL注入漏洞

Vehicle Management System is a vehicle management system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in Vehicle Management System version 1.0, which stems from vulnerability to SQL injection attacks...

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

PT-2025-3803 · Unknown · Codezips Project Management System

Name of the Vulnerable Software and Affected Versions: Codezips Project Management System version 1.0 Description: A critical issue has been found in Codezips Project Management System. This issue affects an unknown part of the file /pages/forms/course.php. The manipulation of the course name...

studentmanager 代码问题漏洞

studentmanager is a student management system by the individual developers of ZeroWdd. A code issue vulnerability exists in studentmanager version 1.0, which stems from the parameter file in the file src/main/Java/com/wdd/studentmanager/controller/TeacherController.java that can lead to...

CVE-2025-0205

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

PT-2025-3774 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user/update account.php. The manipulation of the username argume...

Campcodes Student Grading System 注入漏洞

Student Grading System is a student grading system. A SQL injection vulnerability exists in Student Grading System version 1.0, which stems from a lack of validation of externally entered SQL statements in the parameter id of the file /viewstudents.php. An attacker can exploit this vulnerability ...

PT-2025-3781 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical vulnerability was found in the code-projects Online Shoe Store. This issue affects an unknown part of the file /summary.php. The manipulation of the tid argument leads to SQL...

PT-2025-3784 · Unknown · Campcodes Student Grading System

Name of the Vulnerable Software and Affected Versions: Campcodes Student Grading System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /view students.php. The manipulation of the id argument leads to SQL injection. It is possible to...

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

WordPress Data Dash plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Data Dash versions = 1.2.3...

PT-2025-3772 · Unknown · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /user/minus cart.php. The manipulation of the id argument leads to SQL...

PT-2025-3763 · Unknown · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue affects an unknown part of the file /user/search result2.php of the component Parameter Handler. The manipulation of the search argument...