CVE-2025-6936

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /addpro.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-48758

CVE-2024-48758 affects the dingfanzu CMS v1.0. The Red Hat, NVD, CNNVD, CVE records describe a CSRF vulnerability via the addPro parameter of doAdminAction.php that enables a remote attacker to execute arbitrary code. The issue is documented across multiple feeds, with the practical impact framed...