Lucene search
+L

2755 matches found

OSV
OSV
added 2025/08/31 11:15 p.m.14 views

CVE-2025-9750

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00415EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/31 11:02 p.m.7 views

CVE-2025-9750 Campcodes Online Learning Management System login.php sql injection

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7.1AI score0.00415EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/31 11:02 p.m.25 views

CVE-2025-9750 Campcodes Online Learning Management System login.php sql injection

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00415EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/08/31 12:00 a.m.13 views

Learning Management System 安全漏洞

Learning Management System is itsourcecode open source a learning management system. A security vulnerability exists in Learning Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter Username in the file /admin/login.php...

9.8CVSS7.7AI score0.00415EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/08/31 12:00 a.m.13 views

PT-2025-35431

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code within the /admin/login.php file. Manipulatio...

9.8CVSS7.4AI score0.00415EPSS
SaveExploits1References13
OSV
OSV
added 2025/08/30 3:15 p.m.13 views

CVE-2025-9694

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS5.8AI score0.00536EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/30 3:15 p.m.12 views

CVE-2025-9694

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS0.00536EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/30 3:02 p.m.25 views

CVE-2025-9694 Campcodes Advanced Online Voting System login.php sql injection

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...

7.5CVSS0.00536EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/30 3:02 p.m.8 views

CVE-2025-9694 Campcodes Advanced Online Voting System login.php sql injection

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has...

7.5CVSS7AI score0.00536EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/30 3:02 p.m.31 views

CVE-2025-9694

CVE-2025-9694 affects Campcodes Advanced Online Voting System 1.0. The vulnerability lies in an unknown functionality of /admin/login.php where manipulating the Username argument enables SQL injection. Exploitation can be remote and there are public disclosures of the exploit. CVSS data indicate ...

9.8CVSS7AI score0.00536EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/30 12:00 a.m.15 views

PT-2025-35373

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A SQL injection issue exists in an unknown functionality of the file /admin/login.php. Manipulation of the Username argument can lead to successful exploitation. The attack can ...

7.5CVSS7.5AI score0.00536EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/08/30 12:00 a.m.11 views

CampCodes Advanced Online Voting System 安全漏洞

CampCodes Advanced Online Voting System is an advanced online voting system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Advanced Online Voting System, which results from a SQL injection due to incorrect manipulation of the parameter Username in the file...

9.8CVSS7.7AI score0.00536EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-24851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile...

8.1CVSS6.7AI score0.01113EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/25 7:20 a.m.10 views

CVE-2025-5060

The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebookajaxlogincallback. This makes it possible for...

8.1CVSS5.9AI score0.004EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/23 6:43 a.m.35 views

CVE-2025-5060

CVE-2025-5060 refers to the Bravis User plugin for WordPress (versions up to 1.0.0) with an authentication bypass. The issue arises from improper handling of login data verified via the facebook_ajax_login_callback(), enabling unauthenticated attackers to log in as administrator users if they hav...

8.1CVSS5.9AI score0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/23 6:43 a.m.21 views

CVE-2025-5060 Bravis User <= 1.0.1 - Authentication Bypass to Account Takeover

The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebookajaxlogincallback. This makes it possible for...

8.1CVSS0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/23 6:43 a.m.27 views

CVE-2025-5821 Case Theme User <= 1.0.3 - Authentication Bypass via Social Login

The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebookajaxlogincallback function. This makes it possible f...

9.8CVSS0.00741EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/23 6:43 a.m.82 views

CVE-2025-5821

The CVE-2025-5821 case concerns the WordPress plugin Case Theme User (versions up to 1.0.3). The vulnerability is an Authentication Bypass caused by improper login handling in the facebook_ajax_login_callback() pathway, enabling unauthenticated attackers who have an existing site account and acce...

9.8CVSS6AI score0.00741EPSS
SaveIn wildExploits0References2
NVD
NVD
added 2025/08/23 5:15 a.m.10 views

CVE-2025-7642

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwcwoocommerceordercreated function. This makes it possible for...

9.8CVSS0.00488EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.28 views

PT-2025-34523

Name of the Vulnerable Software and Affected Versions: Case Theme User plugin for WordPress versions prior to 1.0.4 Description: The Case Theme User plugin for WordPress is susceptible to an authentication bypass. This issue stems from the plugin's failure to correctly log in a user with data...

9.8CVSS6.5AI score0.00741EPSS
SaveExploits0References15
Rows per page
Query Builder