CVE-2025-8502

A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the file /changepass.php. The manipulation of the argument ups leads to sql injection. The attack can be launched remotely. The exploit has be...

CVE-2020-15014

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...