Lucene search
+L

5601 matches found

Positive Technologies
Positive Technologies
•added 2025/07/09 12:00 a.m.•26 views

PT-2025-28846 · Unknown · Campcodes Payroll Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Payroll Management System version 1.0 Description: A critical issue exists in the software due to a SQL injection vulnerability. The manipulation of the ID argument in the processing of the /ajax.php?action=delete position file allo...

9.8CVSS7AI score0.00469EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•10 views

CVE-2025-7219: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deleteallowances. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7AI score0.00469EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•8 views

CVE-2025-7217: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=saveposition. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit ha...

9.8CVSS7AI score0.00469EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•10 views

CVE-2025-7220: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savedeductions. The manipulation of the argument ID leads to sql injection. The attack can be launched...

9.8CVSS7.1AI score0.00469EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•13 views

CVE-2025-7218: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteposition. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS7AI score0.00469EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/09 12:00 a.m.•29 views

CampCodes Payroll Management System Injection Vulnerability

CampCodes Payroll Management System is a payroll management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Payroll Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter ID in file/ajax.php...

9.8CVSS7.2AI score0.00469EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/07/08 3:15 p.m.•18 views

CVE-2025-7183

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References5
NVD
NVD
•added 2025/07/08 3:15 p.m.•21 views

CVE-2025-7183

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

9.8CVSS0.00487EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/08 3:02 p.m.•58 views

CVE-2025-7183

CVE-2025-7183 affects Campcodes Sales and Inventory System 1.0, specifically the file /pages/customer_account.php where the manipulation of the parameter Customer leads to a SQL injection. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. Multiple connected...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/07/08 3:02 p.m.•35 views

CVE-2025-7183 Campcodes Sales and Inventory System customer_account.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

7.5CVSS0.00487EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/08 3:02 p.m.•11 views

CVE-2025-7183 Campcodes Sales and Inventory System customer_account.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

7.5CVSS7AI score0.00487EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/07/08 6:15 a.m.•19 views

CVE-2025-7165

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...

9.8CVSS7AI score0.00554EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/07/08 6:15 a.m.•19 views

CVE-2025-7164

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...

9.8CVSS7AI score0.00554EPSS
SaveExploits1References4
CVE
CVE
•added 2025/07/08 5:32 a.m.•42 views

CVE-2025-7164

CVE-2025-7164 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is in /index.php via the Username parameter, allowing SQL injection. It can be exploited remotely and is described with high severity (NVD CVSSv3.1 base score 9.8; also cited as high/critical in other f...

9.8CVSS7AI score0.00554EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/08 5:32 a.m.•12 views

CVE-2025-7164 PHPGurukul/Campcodes Cyber Cafe Management System index.php sql injection

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...

7.5CVSS7AI score0.00554EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/07/08 12:15 a.m.•16 views

CVE-2025-7152

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/candidatesadd.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...

8.8CVSS6.2AI score0.00448EPSS
SaveExploits1References5
NVD
NVD
•added 2025/07/08 12:15 a.m.•27 views

CVE-2025-7152

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/candidatesadd.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...

8.8CVSS0.00448EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/07/08 12:00 a.m.•22 views

PT-2025-28481 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/pages/customer account.php". The manipulation of the Customer argument leads to SQL...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•8 views

CVE-2025-7183: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customeraccount.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•9 views

CVE-2025-7164: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...

9.8CVSS7AI score0.00554EPSS
SaveExploits1References1
Rows per page
Query Builder