197 matches found
CVE-2025-10425 1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload
A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/studentcontroller.php. Such manipulation of the argument newimage leads to unrestricted upload. The attack m...
PT-2025-37448
Name of the Vulnerable Software and Affected Versions 1000projects Online Student Project Report Submission and Evaluation System version 1.0 Description A vulnerability exists in 1000projects Online Student Project Report Submission and Evaluation System version 1.0 that allows for unrestricted...
PT-2025-37447
Name of the Vulnerable Software and Affected Versions 1000projects Online Student Project Report Submission and Evaluation System version 1.0 Description A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an...
1000 Projects Online Student Project Report 代码问题漏洞
1000 Projects Online Student Project Report is an open source online student project reporting system from 1000 Projects. A code issue vulnerability exists in version 1.0 of 1000 Projects Online Student Project Report, which stems from an incorrect manipulation of the parameter newimage in the fi...
CVE-2025-56630
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the columnmodel parameter in the app/admin/controller/Column.php file...
PT-2025-36470
Name of the Vulnerable Software and Affected Versions: FoxCMS versions prior to 1.2.6 Description: FoxCMS is susceptible to a SQL Injection issue through the column model parameter located in the app/admin/controller/Column.php file. Recommendations: Update FoxCMS to version 1.2.6 or later...
CVE-2025-56630: Improper Neutralization of Special Elements used in an SQL Command
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the columnmodel parameter in the app/admin/controller/Column.php file...
CVE-2025-56630
FoxCMS version 1.2.5 and before is vulnerable to SQL Injection due to improper neutralization of special elements in the column_model parameter. The vulnerability is located within the app/admin/controller/Column.php file. An attacker could exploit this flaw to execute unauthorized SQL queries. R...
PT-2025-34732
Name of the Vulnerable Software and Affected Versions: 1000projects Online Project Report Submission and Evaluation System version 1.0 Description: A SQL injection issue exists due to the manipulation of the batch id argument in the processing of the /admin/controller/delete group student.php fil...
CVE-2025-9444: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue affects some unknown processing of the file /admin/controller/deletegroupstudent.php. The manipulation of the argument batchid leads to sql injection. The attack can be initiated...
CVE-2025-45315
A cross-site scripting XSS vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the email parameter...
CVE-2025-45315
The hortusfox-web v4.4 software contains a cross-site scripting (XSS) vulnerability in the /controller/admin.php endpoint. The root cause is the improper neutralization of input, specifically allowing attackers to inject a crafted payload into the email parameter. Successful exploitation enables ...
pybbs 安全漏洞
pybbs is a community platform for Java development by iuiu individual developers. A security vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from a weak password requirement in the function update in the file...
CVE-2025-8518
A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...
Roothub 代码注入漏洞
Roothub is a forum system developed using SSM and MySQL. A code injection vulnerability exists in Roothub 2.6 and earlier versions, which originates from cross-site scripting due to function Edit in file src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java...
FoxCMS 注入漏洞
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS. FoxCMS 1.2.5 and previous versions exist injection vulnerability, the vulnerability stems from the file app/admin/controller/Video.php in the parameter ids of the wrong operation leads to SQL injection...
CVE-2025-7568: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in qianfox FoxCMS up to 1.2.5. It has been classified as critical. Affected is the function batchCope of the file app/admin/controller/Video.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
bicycleSharingServer 注入漏洞
bicycleSharingServer is a bicycle sharing JavaWEB backend for huija individual developers in China. An injection vulnerability exists in bicycleSharingServer, which stems from improper manipulation of the Title parameter in the searchAdminMessageShow function in the AdminController.java file, whi...
bicycleSharingServer 注入漏洞
bicycleSharingServer is a bicycle sharing JavaWEB backend for huija individual developers in China. An injection vulnerability exists in bicycleSharingServer version 1.0, which originates from a mishandling of the selectAdminByNameLike function in the AdminController.java file, which could lead t...
