Code-Projects Food Distributor Site 代码注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. A code injection vulnerability exists in Code-Projects Food Distributor Site version 1.0, which originates from cross-site scripting due to incorrect operation of the parameters sitephone/siteemail/address i...

PT-2025-27258 · Unknown · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A vulnerability was found in the code-projects Food Distributor Site, affecting an unknown function of the file /admin/save settings.php. The manipulation of the argument site phone...

Code-Projects Food Distributor Site 注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. Code-Projects Food Distributor Site version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameters username/password in the file...

PT-2025-27257 · Code Projects · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A critical issue has been found in the processing of the file /admin/process login.php. The manipulation of the username and password arguments leads to SQL injection. The attack ma...

CVE-2025-6667

A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit h...

CVE-2025-6668 code-projects Inventory Management System fetchSelectedBrand.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /phpaction/fetchSelectedBrand.php. The manipulation of the argument brandId leads to sql injection. It is possible to initiate the attack...

CVE-2025-6668

Code-projects Inventory Management System 1.0 contains a SQL injection in /php_action/fetchSelectedBrand.php via the brandId parameter. The issue is exploitable remotely and has public disclosure, with impact on confidentiality, integrity, and availability as described in multiple sources. No con...

CVE-2025-6665

The CVE-2025-6665 entry describes a SQL injection in code-projects Inventory Management System 1.0, arising from unsafely handling the editBrandStatus parameter in the file /php_action/editBrand.php. The vulnerability is exploitable remotely and has been publicly disclosed, enabling attackers to ...

CVE-2025-6665 code-projects Inventory Management System editBrand.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...

CVE-2025-6612 code-projects Inventory Management System removeCategories.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/removeCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated...

PT-2025-26882 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /php action/editBrand.php. The manipulation of the editBrandStatus argument leads to SQL...

PT-2025-26843 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been identified, affecting the file /php action/createBrand.php. The manipulation of the brandStatus argument leads to SQL injection. This issue can be...

PT-2025-26844 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/removeCategories.php, where the manipulation of the categoriesId argument leads to SQL injection. The attack ca...

PT-2025-26908 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been found in the code-projects Inventory Management System. The problem affects the /php action/fetchSelectedBrand.php file, where the manipulation of th...

PT-2025-26789 · Code Projects · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical issue affects the processing of the file /message admin.php, where the manipulation of the Message argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-26747 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the system, affecting an unknown functionality of the file /student.php. The manipulation of the argument sname, contact, about, emailid, or...

CVE-2025-6360

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /portal.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2025-6502

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6503

CVE-2025-6503 affects code-projects Inventory Management System 1.0. The vulnerability is in processing /php_action/fetchSelectedCategories.php, where manipulating the categoriesId parameter leads to SQL injection. Exploitation can be remote, and public disclosure is noted. Multiple connected sou...

CVE-2025-6501

Code-projects Inventory Management System 1.0 has a SQL injection in the /php_action/createCategories.php endpoint, triggered by the categoriesStatus parameter. The issue is remotely exploitable and the exploit has been publicly disclosed. Publicly accessible documents describe the vulnerability ...