Lucene search
+L

4881 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•8 views

CVE-2025-0299: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

9.8CVSS6.4AI score0.0061EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2025-0300: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.4AI score0.00574EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2025-0297: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

6.5CVSS6.4AI score0.00697EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•8 views

CVE-2025-0295: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /booklist.php?subcatid=1. The manipulation of the argument subcatnm leads to cross site scripting. The attack may be launched remotely. T...

5.4CVSS3.3AI score0.00478EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2025-0296: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unknown part of the file /booklist.php. The manipulation of the argument subcatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00725EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•17 views

Code-Projects Online Book Shop SQL Injection Vulnerability

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /detail.php page...

6.5CVSS6.6AI score0.00697EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•20 views

Code-Projects Online Book Shop Injection Vulnerabilities

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. An injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which stems from an SQL injection vulnerability in the cat parameter of the /subcat.php page...

8.8CVSS6.5AI score0.00574EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•21 views

Code-Projects Online Book Shop SQL Injection Vulnerability

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

9.8CVSS6.5AI score0.00725EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•26 views

PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

6.5CVSS6.3AI score0.00697EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•23 views

PT-2025-3815

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A problem has been found in the software, affecting some unknown functionality of the file /booklist.php?subcatid=1. The issue is caused by the manipulation of the subcatnm argument, leadi...

5.4CVSS3.5AI score0.00478EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•19 views

Code-Projects Online Book Shop Security Vulnerabilities

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the usernm parameter of the /processlogin.php page...

9.8CVSS6.6AI score0.00953EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•7 views

PT-2025-3818

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A critical issue affects the processing of the file /process login.php, where the manipulation of the usernm argument leads to SQL injection. The attack can be initiated remotely...

9.8CVSS6.4AI score0.00953EPSS
SaveExploits1References8
osv_cve
osv_cve
•added 2025/01/05 9:15 p.m.•15 views

CVE-2025-0230

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00716EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/05 9:00 p.m.•57 views

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS0.00716EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/05 9:00 p.m.•16 views

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS6.4AI score0.00716EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/05 12:00 a.m.•25 views

Code-Projects Travel Management System Injection Vulnerability

Code-Projects Travel Management System is a Code-Projects open source travel management system. An injection vulnerability exists in Code-Projects Travel Management System version 1.0, which originates from the pid/t1/t2/t3/t4/t5/t6/t7 parameters in the /enquiry.php page containing a SQL injectio...

9.8CVSS6.5AI score0.00716EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/05 12:00 a.m.•7 views

CVE-2025-0228: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The...

5.1CVSS3.3AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/05 12:00 a.m.•8 views

CVE-2025-0229: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0. This issue affects some unknown processing of the file /enquiry.php. The manipulation of the argument pid/t1/t2/t3/t4/t5/t6/t7 leads to sql injection. The attack may be initiated...

9.8CVSS6.4AI score0.00716EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/05 12:00 a.m.•6 views

CVE-2025-0230: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00716EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/05 12:00 a.m.•31 views

PT-2025-3798 · Unknown · Code-Projects Local Storage Todo App

Name of the Vulnerable Software and Affected Versions: code-projects Local Storage Todo App version 1.0 Description: A problem has been found in the code that affects the /js-todo-app/index.html file. The issue arises from the manipulation of the Add argument, leading to cross-site scripting. Thi...

5.1CVSS4.3AI score0.00308EPSS
SaveExploits0References10
Rows per page
Query Builder