413 matches found
CVE-2025-11352
The CVE-2025-11352 entry concerns code-projects Online Hotel Reservation System 1.0. The vulnerability resides in the /admin/addexec.php script, where manipulation of the image parameter enables unrestricted file uploads. This flaw is described as remotely exploitable and is noted as publicly dis...
EUVD-2008-0207
Malware in sbrugna...
EUVD-2010-2142
Malware in sbrugna...
EUVD-2018-8619
Malware in sbrugna...
EUVD-2025-31387
Malicious code in bioql PyPI...
EUVD-2025-32296
Malicious code in bioql PyPI...
EUVD-2025-24683
Malicious code in bioql PyPI...
EUVD-2025-27095
Malicious code in bioql PyPI...
EUVD-2023-3291
Malicious code in bioql PyPI...
EUVD-2024-54895
Malicious code in bioql PyPI...
EUVD-2025-28423
Malicious code in bioql PyPI...
EUVD-2025-30774
Malicious code in bioql PyPI...
EUVD-2025-26707
Malicious code in bioql PyPI...
EUVD-2025-26218
Malicious code in bioql PyPI...
EUVD-2021-27463
Malicious code in bioql PyPI...
EUVD-2025-26295
Malicious code in bioql PyPI...
EUVD-2025-26330
Malicious code in bioql PyPI...
CVE-2025-11111 Campcodes Advanced Online Voting Management System candidates_edit.php sql injection
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to...
CVE-2025-11110
CVE-2025-11110 affects Campcodes Online Learning Management System 1.0. The vulnerability is an SQL injection in the /admin/school_year.php file triggered by manipulating the school_year parameter, allowing remote exploitation. Several connected sources confirm exploitation has been publicly rele...
CVE-2025-11103
A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be initiated remotel...