Lucene search
+L

3457 matches found

Vulnrichment
Vulnrichment
added 2025/12/14 6:32 a.m.7 views

CVE-2025-14647 code-projects Computer Book Store admin_delete.php sql injection

A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admindelete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public...

7.5CVSS6.7AI score0.00379EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/14 6:32 a.m.35 views

CVE-2025-14647 code-projects Computer Book Store admin_delete.php sql injection

A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admindelete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public...

7.5CVSS0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.10 views

Code-Projects Computer Book Store SQL注入漏洞

Code-Projects Computer Book Store is an open source computer book store by Code-Projects. Code-Projects Computer Book Store version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter bookisbn in the file /admindelete.php, which could lead to a S...

9.8CVSS7.7AI score0.00379EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/12/13 6:54 p.m.15 views

CVE-2025-14571

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.3AI score0.00433EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/13 3:02 a.m.10 views

CVE-2025-13886

The LT Unleashed plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.1 via the 'template' parameter in the book shortcode due to insufficient path sanitization. This makes it possible for authenticated attackers, with Contributor-level access and...

7.5CVSS7.1AI score0.00586EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 9:31 p.m.11 views

EUVD-2025-203123

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00433EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/12 7:16 p.m.9 views

CVE-2025-14571

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00433EPSS
SaveExploits1References4
CVE
CVE
added 2025/12/12 6:32 p.m.22 views

CVE-2025-14571

The CVE-2025-14571 entry affects Projectworlds Advanced Library Management System 1.0, specifically the /borrow_book.php functionality. The vulnerability arises from manipulation of the roll_number argument, leading to SQL injection. It is exploitable remotely and an exploit has been disclosed pu...

9.8CVSS6.8AI score0.00433EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/12 6:32 p.m.43 views

CVE-2025-14571 projectworlds Advanced Library Management System borrow_book.php sql injection

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00433EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/12 6:32 p.m.5 views

CVE-2025-14571 projectworlds Advanced Library Management System borrow_book.php sql injection

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.00433EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/12 3:30 a.m.10 views

EUVD-2025-202937

The LT Unleashed plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.1 via the 'template' parameter in the book shortcode due to insufficient path sanitization. This makes it possible for authenticated attackers, with Contributor-level access and...

7.5CVSS6.6AI score0.00586EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/12 3:15 a.m.12 views

CVE-2025-13886

The LT Unleashed plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.1 via the 'template' parameter in the book shortcode due to insufficient path sanitization. This makes it possible for authenticated attackers, with Contributor-level access and...

7.5CVSS0.00586EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/12/12 12:00 a.m.28 views

MailEnable FieldBcc Parameter Cross-Site Scripting Vulnerability

MailEnable is a commercial email server software designed for Windows operating systems that provides end-to-end email hosting and collaboration solutions. MailEnable suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied da...

6.1CVSS6.2AI score0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/12 12:00 a.m.9 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter rollnumber in the file...

9.8CVSS7.8AI score0.00433EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/12 12:00 a.m.19 views

PT-2025-50801

The LT Unleashed plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.1 via the 'template' parameter in the book shortcode due to insufficient path sanitization. This makes it possible for authenticated attackers, with Contributor-level access and...

7.5CVSS7.1AI score0.00586EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/12 12:00 a.m.12 views

PT-2025-50964

Name of the Vulnerable Software and Affected Versions Advanced Library Management System version 1.0 Description A flaw exists in Advanced Library Management System version 1.0 where manipulation of the roll number argument in the /borrow book.php file can lead to SQL injection. This issue can be...

9.8CVSS7.5AI score0.00433EPSS
SaveExploits1References8
OSV
OSV
added 2025/12/11 5:15 p.m.10 views

CVE-2025-14527

A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /viewbook.php. Executing a manipulation of the argument bookid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/11 5:02 p.m.52 views

CVE-2025-14527 projectworlds Advanced Library Management System view_book.php sql injection

A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /viewbook.php. Executing a manipulation of the argument bookid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

7.5CVSS0.00379EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/11 5:02 p.m.7 views

CVE-2025-14527 projectworlds Advanced Library Management System view_book.php sql injection

A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /viewbook.php. Executing a manipulation of the argument bookid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

7.5CVSS7.3AI score0.00379EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/11 12:00 a.m.14 views

PT-2025-50638

A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /view book.php. Executing manipulation of the argument book id can lead to sql injection. The attack can be executed remotely. The exploit has been made...

7.5CVSS7.4AI score0.00379EPSS
SaveExploits1References6
Rows per page
Query Builder