Lucene search
+L

3007 matches found

RedhatCVE
RedhatCVE
•added 2025/12/22 3:23 a.m.•14 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/21 4:16 a.m.•17 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/21 4:16 a.m.•17 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS0.00379EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/21 3:02 a.m.•54 views

CVE-2025-14990

The CVE-2025-14990 issue affects Campcodes Complete Online Beauty Parlor Management System 1.0. The vulnerability is an SQL injection in the file /admin/view-appointment.php, caused by manipulation of the viewid parameter in an unknown function. The attack can be performed remotely, and public ex...

9.8CVSS6.9AI score0.00379EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/21 3:02 a.m.•9 views

CVE-2025-14990 Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

7.5CVSS6.9AI score0.00379EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/21 3:02 a.m.•50 views

CVE-2025-14990 Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

7.5CVSS0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/21 12:00 a.m.•20 views

PT-2025-52577

Name of the Vulnerable Software and Affected Versions Campcodes Complete Online Beauty Parlor Management System version 1.0 Description A security flaw exists in Campcodes Complete Online Beauty Parlor Management System 1.0. The issue involves SQL injection, potentially allowing remote attackers ...

9.8CVSS6.7AI score0.00379EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/12/21 12:00 a.m.•16 views

CampCodes Complete Online Beauty Parlor Management System SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid i...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/12/20 4:17 a.m.•26 views

CVE-2025-14939

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS6.7AI score0.0032EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/19 6:48 a.m.•53 views

CVE-2025-13754 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.9.16. This is due to the plugin exposing its admin embed endpoint at /wp-json/ssa/v1/embed-inner-admin without...

5.3CVSS0.00349EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/19 6:30 a.m.•17 views

EUVD-2025-204440

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS6.3AI score0.0032EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/19 4:16 a.m.•26 views

CVE-2025-14939

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS0.0032EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/19 4:16 a.m.•17 views

CVE-2025-14939

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS5.6AI score0.0032EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/19 4:02 a.m.•12 views

CVE-2025-14939 code-projects Online Appointment Booking System deletemanager.php sql injection

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS5.4AI score0.0032EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/19 4:02 a.m.•56 views

CVE-2025-14939 code-projects Online Appointment Booking System deletemanager.php sql injection

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS0.0032EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•9 views

CVE-2025-13754: Missing Authorization

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.9.16. This is due to the plugin exposing its admin embed endpoint at /wp-json/ssa/v1/embed-inner-admin without...

5.3CVSS5.8AI score0.00349EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•9 views

CVE-2025-14939: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS5.4AI score0.0032EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•24 views

PT-2025-52410

Name of the Vulnerable Software and Affected Versions Online Appointment Booking System version 1.0 Description A flaw exists in the Online Appointment Booking System that allows for SQL injection. The issue is located in the /admin/deletemanager.php file, specifically through manipulation of the...

7.2CVSS5.2AI score0.0032EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•16 views

Code-Projects Online Appointment Booking System SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter managername in the file /admin/deletemanager.ph...

7.2CVSS5.8AI score0.0032EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•27 views

WordPress Plugin Appointment Booking Calendar has a security vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Appointment Booking...

5.3CVSS5.6AI score0.00349EPSS
SaveExploits0References3
Rows per page
Query Builder