Lucene search
+L

147 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•1 views

CVE-2025-9505: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=saveloantype. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•1 views

CVE-2025-9502: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Loan Management System 1.0. This impacts an unknown function of the file /ajax.php?action=savepayment. Executing manipulation of the argument loanid can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•1 views

CVE-2025-9504: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveplan. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now publ...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•1 views

CVE-2025-9506: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Loan Management System 1.0. This affects an unknown part of the file /ajax.php?action=deleteplan. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote location. The exploit has been disclosed to t...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/30 12:00 a.m.•2 views

CVE-2025-8334: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

9.8CVSS5.5AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/30 12:00 a.m.•2 views

CVE-2025-8336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS5.5AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/28 12:00 a.m.•5 views

CVE-2025-8274: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...

9.8CVSS5.5AI score0.0043EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•2 views

CVE-2025-7219: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deleteallowances. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.5AI score0.00437EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•2 views

CVE-2025-7217: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=saveposition. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit ha...

9.8CVSS5.5AI score0.00437EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•1 views

CVE-2025-7220: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savedeductions. The manipulation of the argument ID leads to sql injection. The attack can be launched...

9.8CVSS5.5AI score0.00437EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•2 views

CVE-2025-7218: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteposition. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS5.5AI score0.00437EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7131: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveemployeeattendance. The manipulation of the argument employeeid leads to sql injection. The attack ca...

9.8CVSS5.5AI score0.00516EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•3 views

CVE-2025-7128: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculatepayroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS5.5AI score0.00516EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savevacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiat...

9.8CVSS5.5AI score0.00454EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteapplication. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS5.5AI score0.00454EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•3 views

CVE-2025-7130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletepayroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS5.5AI score0.00516EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7132: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=savepayroll. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.5AI score0.00516EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/21 12:00 a.m.•7 views

CVE-2025-6422: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=savesettings of the component About Content Page. The manipulation of the argument img leads to...

8.8CVSS5.3AI score0.00449EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•5 views

CVE-2025-5677: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=saveapplication. The manipulation of the argument positionid leads to sql injection. The attack may be...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•4 views

CVE-2025-5676: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=login. The manipulation of the argument Username leads to sql injection. The attack can be initiated...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References1
Rows per page
Query Builder