Lucene search
+L

195 matches found

osv_cve
osv_cve
•added 2025/07/28 3:15 a.m.•21 views

CVE-2025-8253

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/deletes6.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00544EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/07/28 3:15 a.m.•23 views

CVE-2025-8252

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletes5.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

9.8CVSS5.8AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•20 views

Code-Projects Exam Form Submission Injection Vulnerability

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes6.php...

9.8CVSS7.8AI score0.00544EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•23 views

Code-Projects Exam Form Submission Injection Vulnerability

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to manipulation of the parameter ID in the file /admin/deletes3.php...

9.8CVSS7.7AI score0.00516EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•21 views

Code-Projects Exam Form Submission Injection Vulnerability

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes4.php...

9.8CVSS7.8AI score0.00544EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•20 views

Code-Projects Exam Form Submission Injection Vulnerability

Code-Projects Exam Form Submission is an exam form from Code-Projects open source. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in file /admin/deletes5.php...

9.8CVSS7.8AI score0.00544EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/07/27 3:15 p.m.•15 views

CVE-2025-8234

A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS5.8AI score0.00559EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/27 12:00 a.m.•18 views

Code-Projects Online Ordering System Injection Vulnerabilities

Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /admin/deleteuser.ph...

9.8CVSS7.7AI score0.00559EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•7 views

CVE-2025-7197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Jonnys Liquor 1.0. This affects an unknown part of the file /admin/delete-row.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

9.8CVSS5.5AI score0.00487EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•19 views

Simple Online Hotel Reservation System delete_room.php File SQL Injection Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter roomid in the file...

9.8CVSS8.3AI score0.00481EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/06/22 2:15 a.m.•20 views

CVE-2025-6451

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletepending.php. The manipulation of the argument transactionid leads to sql injection. The attack can be initiated...

9.8CVSS5.7AI score0.00481EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•25 views

Projectworlds Responsive E-Learning System Security Vulnerabilities

Projectworlds Responsive E-Learning System is a responsive e-learning system from Projectworlds India. A security vulnerability exists in Projectworlds Responsive E-Learning System version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00519EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:42 a.m.•19 views

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

8.4CVSS8.5AI score0.00238EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:18 p.m.•20 views

CVE-2021-32008

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories...

9.9CVSS6.9AI score0.00996EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/18 12:00 a.m.•7 views

CVE-2025-4895: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. T...

9.8CVSS7AI score0.00595EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/17 12:00 a.m.•19 views

SourceCodester Doctors Appointment System Injection Vulnerability

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00562EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/17 12:00 a.m.•6 views

CVE-2025-4817: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete-appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/17 12:00 a.m.•18 views

SourceCodester Doctors Appointment System Injection Vulnerability

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/04/13 12:15 p.m.•14 views

CVE-2025-3536

A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched...

6.9CVSS6.2AI score0.00704EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/13 12:00 a.m.•9 views

CVE-2025-3536: Improper Authorization

A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched...

6.9CVSS6.3AI score0.00704EPSS
SaveExploits1References1
Rows per page
Query Builder