Lucene search
+L

1157 matches found

NVD
NVD
added 2025/09/03 3:15 p.m.6 views

CVE-2025-57149

phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter...

6.5CVSS0.004EPSS
Exploits1References2
OSV
OSV
added 2025/09/03 3:15 p.m.6 views

CVE-2025-57149

phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter...

6.5CVSS5.9AI score0.004EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.6 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the cid parameter of /complaint-details.php. An attacker can exploit this vulnerabili...

6.5CVSS8.2AI score0.004EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/09/03 12:0 a.m.11 views

CVE-2025-57149

phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter...

0.004EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/09/03 12:0 a.m.4 views

CVE-2025-57149

phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter...

7.5AI score0.004EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2020-25661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw...

8.8CVSS7.2AI score0.07693EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-25015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b...

7.8CVSS7.3AI score0.00569EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2025/08/05 12:0 a.m.176 views

📄 Lost and Found Information System 1.0 SQL Injection

Lost and Found Information System version 1.0 suffers from a remote SQL injection vulnerability. This particular version was already known to be susceptible to such attacks in 2023 but appears to have other vectors of exploitability for the same issue. Titles: Lost and Found Information System-1....

8.3AI score
Exploits0
OSV
OSV
added 2025/07/25 4:15 p.m.3 views

DEBIAN-CVE-2025-38462

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transportg2h,h2g TOCTOU vsockfindcid and vsockdevdoioctl may race with module unload. transportg2h,h2g may become NULL after the NULL check. Introduce vsocktransportlocalcid to protect from a potential null-ptr-deref...

4.7CVSS5.3AI score0.00112EPSS
Exploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.8 views

AZL-72950 CVE-2025-38462 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transportg2h,h2g TOCTOU vsockfindcid and vsockdevdoioctl may race with module unload. transportg2h,h2g may become NULL after the NULL check. Introduce vsocktransportlocalcid to protect from a potential null-ptr-deref...

4.7CVSS6.8AI score0.00112EPSS
Exploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.12 views

UBUNTU-CVE-2025-38462

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transportg2h,h2g TOCTOU vsockfindcid and vsockdevdoioctl may race with module unload. transportg2h,h2g may become NULL after the NULL check. Introduce vsocktransportlocalcid to protect from a potential null-ptr-deref...

4.7CVSS6.1AI score0.00112EPSS
Exploits0References41
OSV
OSV
added 2025/07/17 8:15 p.m.8 views

CVE-2025-7751

A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addclinic.php. The manipulation of the argument cid leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00396EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.6 views

PT-2025-29965 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0. The vulnerability is due to a SQL injection in the /admin/addclinic.php file when...

9.8CVSS7.4AI score0.00396EPSS
Exploits1References9
OSV
OSV
added 2025/07/07 9:15 a.m.4 views

CVE-2025-7121

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/complaint-details.php. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The explo...

8.8CVSS5.8AI score0.00361EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.5 views

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from an improper handling of the parameter cid in the file /pages/cashtransaction.php resulting in an SQL...

9.8CVSS7.9AI score0.00391EPSS
Exploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/11 3:55 a.m.7 views

Malicious code in ac-mvc-cid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110e255563acbb72629ba03afd504713dfd8fbbdcd576258dde5d481975ac5ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/06/11 3:55 a.m.4 views

MAL-2025-4923 Malicious code in ac-mvc-cid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110e255563acbb72629ba03afd504713dfd8fbbdcd576258dde5d481975ac5ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2025/06/09 2:15 p.m.7 views

CVE-2025-5881

A vulnerability was found in code-projects Chat System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /user/confirmpassword.php. The manipulation of the argument cid leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.7AI score0.00408EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.4 views

Code-Projects Chat System 注入漏洞

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cid in the file /user/confirmpassword.php. An attacker can exploit this vulnerability to execute illegal SQL...

9.8CVSS8.2AI score0.00408EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.7 views

PT-2025-24441 · Code Projects · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System versions up to 1.0 Description: A critical issue affects the processing of the file /user/confirm password.php. The manipulation of the cid argument leads to SQL injection. The attack can be initiated remotely...

9.8CVSS6.9AI score0.00408EPSS
Exploits1References9
Rows per page
Query Builder