Lucene search
+L

4878 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•9 views

CVE-2025-3038: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS6.4AI score0.00683EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/30 12:00 a.m.•14 views

PT-2025-13646

Name of the Vulnerable Software and Affected Versions code-projects College Management System version 1.0 Description A critical issue was found in the College Management System, affecting the /Admin/student.php file. The manipulation of the profile image argument leads to unrestricted upload. Th...

9.8CVSS6.4AI score0.00533EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•7 views

CVE-2025-2854: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file updateemployee.php. The manipulation of the argument emptype leads to sql injection. The attack can be launched remotely. The...

8.8CVSS6.4AI score0.00545EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•11 views

CVE-2025-2673: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /homeemployee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploi...

5.4CVSS3.5AI score0.00354EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•21 views

Code-Projects Payroll Management System Injection Vulnerability

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...

7.5CVSS6.5AI score0.00418EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•9 views

CVE-2025-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS6.4AI score0.00418EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•22 views

Code-Projects Payroll Management System security vulnerabilities

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect operation of the parameter division that can lead to cross-site scripting...

5.4CVSS4.9AI score0.00354EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•7 views

PT-2025-12509

Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A critical issue affects the processing of the file /add deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS6.3AI score0.00418EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•9 views

PT-2025-12510

Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A vulnerability has been found in the code-projects Payroll Management System. The issue affects an unknown function of the file /home employee.php. The manipulation of the divisi...

5.4CVSS4.5AI score0.00354EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/03/21 12:00 a.m.•9 views

PT-2025-12416

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A critical issue affects the function Index of the file handlerAccount.go. The manipulation of the argument user cookie leads to improper authorization. The exploit has...

9.8CVSS5.5AI score0.00473EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/03/21 12:00 a.m.•21 views

Code-Projects Human Resource Management System Security Vulnerabilities

Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A security vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from an improperly authorized Index function in the handlerAccount.go...

9.8CVSS5.8AI score0.00473EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/03/21 12:00 a.m.•7 views

PT-2025-12417

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A vulnerability was found in the code-projects Human Resource Management System. It has been classified as problematic. The function UpdateRecruitmentById of the file...

5.4CVSS4.3AI score0.00337EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/21 12:00 a.m.•8 views

CVE-2025-2590: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...

5.4CVSS3.4AI score0.00337EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/19 12:28 a.m.•34 views

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

5.5CVSS5.9AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/19 12:26 a.m.•38 views

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

4.6CVSS5.8AI score0.0021EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/17 9:15 p.m.•49 views

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

4.6CVSS0.0021EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/17 9:15 p.m.•24 views

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

4.6CVSS5.8AI score0.0021EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/17 8:31 p.m.•51 views

CVE-2025-2393 code-projects Online Class and Exam Scheduling System salut_del.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salutdel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

5.8CVSS0.00415EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/17 8:00 p.m.•55 views

CVE-2025-2392 code-projects Online Class and Exam Scheduling System activate.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

5.8CVSS0.00512EPSS
SaveExploits1References5
NVD
NVD
•added 2025/03/17 7:15 p.m.•30 views

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

5.5CVSS0.0024EPSS
SaveExploits1References1
Rows per page
Query Builder