150 matches found
CVE-2025-65022 i-Educar Authenticated Time-based SQL Injection in `agenda.php`
i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the...
CVE-2025-65023
The CVE concerns i-Educar (versions 2.10.0 and earlier). An authenticated, time-based SQL injection exists in the ieducar/intranet/funcionario_vinculo_cad.php script, introduced by directly concatenating the GET parameter cod_funcionario_vinculo into an SQL query without sanitization. An attacker...
EUVD-2025-198233
i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/funcionariovinculocad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands...
CVE-2025-65023 i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`
i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/funcionariovinculocad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands...
CVE-2025-65024 i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`
i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agendaadmincad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against...
CVE-2025-65024
CVE-2025-65024 affects i-Educar up to version 2.10.0. An authenticated time-based SQL injection exists in ieducar/intranet/agenda_admin_cad.php where the cod_agenda GET parameter is directly concatenated into an SQL query. This allows an authenticated user to execute arbitrary SQL against the dat...
CVE-2025-65024 i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`
i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agendaadmincad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against...
i-Educar SQL注入漏洞
i-Educar is a free educational software from Portábilis open source. A SQL injection vulnerability exists in i-Educar version 2.10.0 and earlier, which stems from improper handling of the codagenda parameter and could lead to a SQL injection attack...
i-Educar SQL注入漏洞
i-Educar is a free educational software from Portábilis open source. A SQL injection vulnerability exists in i-Educar version 2.10.0 and earlier, which stems from improper handling of the codagenda parameter and could lead to a SQL injection attack...
i-Educar 安全漏洞
i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10.0 and earlier, which stems from improper handling of the codfuncionariovinculo parameter and can lead to SQL injection attacks...
Malicious code in wispy-tan-cod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3b7f1f26fa97657353304e4095669e56ca4d0f1b3a5b4bc17c831346d39240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116988
Malicious code in wispy-tan-cod npm...
EUVD-2025-117319
Malicious code in horrible-moccasin-cod npm...
EUVD-2025-103751
Malicious code in ministerialcodz3n npm...
Malicious code in ministerial_cod_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52fb88dbf3eaf0c7bb40c062ede993bcbdfad00f27c35ffd741e2487dc662d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-103452
Malicious code in numerouscodz3n npm...
Malicious code in known_cod_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53d2e5c72b223e0ef8be5b4bd00a0c9875cfe097a9cbcae6566860950c4232a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-91150
Malicious code in inadequatecodz3n npm...