Lucene search
+L

4878 matches found

osv_cve
osv_cve
•added 2025/11/16 8:15 a.m.•13 views

CVE-2025-13243

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

8.8CVSS5.7AI score0.00381EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/16 8:15 a.m.•22 views

CVE-2025-13242

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

9.8CVSS5.6AI score0.00472EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 8:02 a.m.•41 views

CVE-2025-13243

CVE-2025-13243 affects code-projects Student Information System 2.0. The vulnerable component is the /editprofile.php file, in an unknown function, where input is not properly filtered, leading to a SQL injection. The vulnerability is exploitable remotely, and the exploit has been publicly releas...

8.8CVSS6.3AI score0.00381EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 8:02 a.m.•11 views

CVE-2025-13243 code-projects Student Information System editprofile.php sql injection

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

6.5CVSS6.3AI score0.00381EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 8:02 a.m.•37 views

CVE-2025-13243 code-projects Student Information System editprofile.php sql injection

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

6.5CVSS0.00381EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 7:32 a.m.•33 views

CVE-2025-13242

CVE-2025-13242 affects code-projects Student Information System 2.0. The vulnerability is in the /register.php handler, where improper handling of user input enables SQL injection. It is exploitable remotely and, according to sources, the exploit has been disclosed publicly. Root cause is input h...

9.8CVSS6.8AI score0.00472EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 7:32 a.m.•14 views

CVE-2025-13242 code-projects Student Information System register.php sql injection

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 7:32 a.m.•32 views

CVE-2025-13242 code-projects Student Information System register.php sql injection

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

7.5CVSS0.00472EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/16 7:15 a.m.•17 views

CVE-2025-13241

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS5.8AI score0.00472EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/16 7:15 a.m.•19 views

CVE-2025-13241

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS0.00472EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/16 7:15 a.m.•17 views

CVE-2025-13240

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

9.8CVSS5.7AI score0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 7:02 a.m.•30 views

CVE-2025-13241 code-projects Student Information System index.php sql injection

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS0.00472EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 7:02 a.m.•44 views

CVE-2025-13241

The CVE concerns code-projects Student Information System 2.0, where the vulnerability resides in the /index.php file. The Username parameter can be manipulated to achieve SQL injection, allowing remote execution. The issue is supported by multiple sources (NVD, Red Hat, CNVD, CNNVD, EUVD, VulnDB...

9.8CVSS7AI score0.00472EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 7:02 a.m.•6 views

CVE-2025-13241 code-projects Student Information System index.php sql injection

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS7AI score0.00472EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/16 6:32 a.m.•10 views

CVE-2025-13240 code-projects Student Information System searchquery.php sql injection

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

7.5CVSS7AI score0.00472EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 6:32 a.m.•36 views

CVE-2025-13240 code-projects Student Information System searchquery.php sql injection

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used...

7.5CVSS0.00472EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•20 views

Code-Projects Student Information System SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from the /editprofile.php file not effectively filtering user input. No details of the vulnerability are available at this time...

8.8CVSS6.8AI score0.00381EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•6 views

CVE-2025-13241: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS7AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•7 views

CVE-2025-13242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

9.8CVSS6.8AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•10 views

CVE-2025-13245: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be...

5.4CVSS3.9AI score0.00278EPSS
SaveExploits1References1
Rows per page
Query Builder