Lucene search
K

3502 matches found

CVE
CVE
added 2025/10/10 8:2 p.m.13 views

CVE-2025-11582

The CVE-2025-11582 entry maps to concrete details across multiple sources: code-projects Online Job Search Engine 1.0 is affected by a SQL injection in the /registration.php script, via manipulation of the txtusername parameter. This is reported as exploitable remotely with public exploits. The C...

9.8CVSS6.9AI score0.00382EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/10 8:2 p.m.8 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS0.00382EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/10 8:2 p.m.4 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS6.9AI score0.00382EPSS
Exploits1References5
OSV
OSV
added 2025/10/10 4:15 p.m.2 views

CVE-2025-60307

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts...

9.8CVSS5.8AI score0.00424EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/10 4:26 a.m.3 views

CVE-2025-11530

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS6.9AI score0.00343EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.4 views

CVE-2025-11512

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/votersadd.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely. The exploit has...

6.1CVSS5.5AI score0.00356EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.4 views

CVE-2025-11513

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplierupdate.php. This manipulation of the argument suppid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

9.8CVSS7AI score0.00431EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.5 views

PT-2025-41592

Name of the Vulnerable Software and Affected Versions code-projects Online Job Search Engine version 1.0 Description A SQL injection issue exists in code-projects Online Job Search Engine 1.0. The flaw is located in the handling of the txtusername parameter within the /registration.php script...

7.5CVSS7.6AI score0.00382EPSS
Exploits1References11
OSV
OSV
added 2025/10/09 9:15 p.m.4 views

CVE-2025-11558

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

9.8CVSS5.7AI score0.00431EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/09 9:2 p.m.8 views

CVE-2025-11558 code-projects E-Commerce Website user_index_search.php sql injection

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

7.5CVSS0.00431EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/09 9:2 p.m.3 views

CVE-2025-11558 code-projects E-Commerce Website user_index_search.php sql injection

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

7.5CVSS6.7AI score0.00431EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 9:2 p.m.11 views

CVE-2025-11558

CVE-2025-11558 affects code-projects E-Commerce Website 1.0, specifically the /pages/user_index_search.php file where the Search parameter can be manipulated to trigger SQL injection. Multiple connected sources (CNVD-2025-23975, RH:CVE-2025-11558, CNNVD-202510-1254, NVD/CVE-2025-11558, CVELIST) d...

9.8CVSS6.7AI score0.00431EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/09 8:32 p.m.11 views

CVE-2025-11556

CVE-2025-11556 affects Code-Projects Simple Leave Manager 1.0. The vulnerability is a SQL injection in the /user.php file caused by improper handling/manipulation of the argument table, enabling remote exploitation. The exploit has been published and may be used. Impact is described as high for c...

9.8CVSS6.6AI score0.00431EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/09 7:32 p.m.7 views

CVE-2025-11553 code-projects Courier Management System add-courier.php sql injection

A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit ha...

6.5CVSS0.00359EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/09 7:2 p.m.8 views

CVE-2025-11552 code-projects Online Complaint Site category.php sql injection

A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

6.5CVSS0.00343EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 7:2 p.m.10 views

CVE-2025-11552

Code-projects Online Complaint Site 1.0 contains an SQL injection in the /admin/category.php file caused by unsafely handling the Category parameter. Several connected sources (CNVD-2025-23959, RH: CVE-2025-11552, NVD/NVD mirrors, CNNVD-2025-1270, EUVD-2025-33580, CVELIST, etc.) describe remote e...

8.8CVSS6.8AI score0.00343EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/09 7:2 p.m.2 views

CVE-2025-11552 code-projects Online Complaint Site category.php sql injection

A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

6.5CVSS6.8AI score0.00343EPSS
Exploits1References5
NVD
NVD
added 2025/10/09 6:15 p.m.1 views

CVE-2025-11551

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS0.00359EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/09 6:2 p.m.8 views

CVE-2025-11551 code-projects Student Result Manager Database.java sql injection

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

6.5CVSS0.00359EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 6:2 p.m.9 views

CVE-2025-11551

CVE-2025-11551 affects Code-Projects Student Result Manager 1.0. The vulnerability is caused by manipulation of arguments in src/students/Database.java (roll/name/gpa) that leads to SQL injection. It can be triggered remotely and the exploit has been publicly disclosed. Connected sources (Red Hat...

9.8CVSS6.7AI score0.00359EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder