Lucene search
+L

5601 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•8 views

CVE-2025-15207: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/viewproducts.php. The manipulation of the argument chkId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS7AI score0.00505EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•18 views

CampCodes Complete Online Beauty Parlor Management System – Cross-site Script Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. Complete Online Beauty Parlor Management System suffers from a cross-site scripting vulnerability that stems from an incorrect manipulation of the parameter searchdata in the file...

4.8CVSS4.8AI score0.00241EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/12/22 3:23 a.m.•14 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/22 12:16 a.m.•29 views

CVE-2025-14989

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/21 6:31 a.m.•18 views

EUVD-2025-204664

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.1AI score0.00379EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/21 6:31 a.m.•18 views

EUVD-2025-204656

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing manipulation of the argument fromdate can lead to cross site scripting. The attack may be launched...

4.8CVSS3.3AI score0.00239EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/12/21 4:16 a.m.•17 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/21 4:16 a.m.•25 views

CVE-2025-14991

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launch...

4.8CVSS3.3AI score0.00239EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/21 4:16 a.m.•18 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS0.00379EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/12/21 3:32 a.m.•14 views

CVE-2025-14991

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launch...

4.8CVSS3.3AI score0.00239EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/21 3:32 a.m.•47 views

CVE-2025-14991 Campcodes Complete Online Beauty Parlor Management System bwdates-reports-details.php cross site scripting

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launch...

4.8CVSS0.00239EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/21 3:32 a.m.•45 views

CVE-2025-14991

The CVE-2025-14991 entry relates to Campcodes Complete Online Beauty Parlor Management System 1.0. The vulnerability is a cross-site scripting (XSS) in the /admin/bwdates-reports-details.php file, triggered by manipulating the fromdate parameter due to an unknown function that mishandles user inp...

4.8CVSS3.3AI score0.00239EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/12/21 3:02 a.m.•54 views

CVE-2025-14990

The CVE-2025-14990 issue affects Campcodes Complete Online Beauty Parlor Management System 1.0. The vulnerability is an SQL injection in the file /admin/view-appointment.php, caused by manipulation of the viewid parameter in an unknown function. The attack can be performed remotely, and public ex...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2025/12/21 3:02 a.m.•10 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/21 3:02 a.m.•50 views

CVE-2025-14990 Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

7.5CVSS0.00379EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/21 12:30 a.m.•19 views

EUVD-2025-204647

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

7.5CVSS7.1AI score0.00379EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/21 12:15 a.m.•23 views

CVE-2025-14989

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

9.8CVSS0.00379EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/21 12:00 a.m.•8 views

CVE-2025-14991: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/bwdates-reports-details.php. Executing a manipulation of the argument fromdate can lead to cross site scripting. The attack may be launch...

4.8CVSS3.3AI score0.00239EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/21 12:00 a.m.•8 views

CVE-2025-14989: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/21 12:00 a.m.•6 views

CVE-2025-14990: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References1
Rows per page
Query Builder