Lucene search
K

3502 matches found

NVD
NVD
added 2025/06/29 1:15 a.m.11 views

CVE-2025-6836

A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipulation of the argument phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS0.00399EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/29 1:0 a.m.7 views

CVE-2025-6837 code-projects Library System profile.php unrestricted upload

A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

6.5CVSS0.00325EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/29 1:0 a.m.3 views

CVE-2025-6837 code-projects Library System profile.php unrestricted upload

A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

6.5CVSS6.5AI score0.00325EPSS
Exploits1References5
CVE
CVE
added 2025/06/29 1:0 a.m.18 views

CVE-2025-6837

CVE-2025-6837 affects code-projects Library System 1.0. The vulnerability is in the file /profile.php where the image parameter can be manipulated to achieve unrestricted file upload. The issue arises from lack of validation of uploaded files, enabling remote exploitation. Multiple sources corrob...

9.8CVSS6.5AI score0.00325EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/06/29 12:31 a.m.7 views

CVE-2025-6836 code-projects Library System profile.php sql injection

A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipulation of the argument phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS0.00399EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/29 12:0 a.m.9 views

CVE-2025-6835 code-projects Library System student-issue-book.php sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00399EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/29 12:0 a.m.5 views

CVE-2025-6835 code-projects Library System student-issue-book.php sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS7.5AI score0.00399EPSS
Exploits1References5
CVE
CVE
added 2025/06/29 12:0 a.m.16 views

CVE-2025-6835

CVE-2025-6835 affects code-projects Library System 1.0, with a vulnerability in the processing of the file "/student-issue-book.php" where the parameter reg can be manipulated to induce an SQL injection . The issue is exploitable remotely and has been discussed across multiple sources; CVSS vecto...

9.8CVSS7.5AI score0.00399EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.2 views

PT-2025-27342 · Code Projects · Code-Projects Product Inventory System

Name of the Vulnerable Software and Affected Versions: code-projects Product Inventory System version 1.0 Description: A critical issue has been discovered, affecting the file /admin/edit product.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

7.2CVSS8.4AI score0.0033EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.3 views

PT-2025-27347 · Unknown · Code-Projects Simple Forum

Name of the Vulnerable Software and Affected Versions: code-projects Simple Forum version 1.0 Description: A critical issue affects some unknown functionality of the file "/register1.php". The manipulation of the User argument leads to SQL injection. The attack may be launched remotely...

9.8CVSS8.2AI score0.00399EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.4 views

PT-2025-27353 · Unknown · Code-Projects Simple Forum

Name of the Vulnerable Software and Affected Versions: code-projects Simple Forum version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file "/forum1.php". The manipulation of the File argument leads to SQL injection. This issue can be exploited...

8.8CVSS8.1AI score0.00318EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/06/29 12:0 a.m.2 views

Code-Projects Simple Photo Gallery 安全漏洞

Code-Projects Simple Photo Gallery is a simple photo gallery system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Photo Gallery version 1.0, which stems from an unlimited upload due to incorrect manipulation of the parameter fileimg in file/upload-photo.p...

9.8CVSS7.4AI score0.00456EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/06/29 12:0 a.m.2 views

Code-Projects Product Inventory System 注入漏洞

Code-Projects Product Inventory System is a Code-Projects open source product inventory system. Code-Projects Product Inventory System version 1.0 suffers from an injection vulnerability, which stems from an incorrect manipulation of the parameter Username in the file /index.php resulting in SQL...

9.8CVSS7.9AI score0.00399EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/29 12:0 a.m.1 views

Code-Projects Product Inventory System 注入漏洞

Code-Projects Product Inventory System is a Code-Projects open source product inventory system . Code-Projects Product Inventory System version 1.0 suffers from an injection vulnerability that stems from SQL injection due to incorrect manipulation of the parameter ID in the file...

7.2CVSS5.6AI score0.0033EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.2 views

PT-2025-27348 · Unknown · Code-Projects Simple Forum

Name of the Vulnerable Software and Affected Versions: code-projects Simple Forum version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /forum viewfile.php. The manipulation of the Name argument leads to SQL injection. This issue can be exploited...

7.5CVSS8.1AI score0.00345EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.3 views

PT-2025-27343 · Code Projects · Code-Projects Product Inventory System

Name of the Vulnerable Software and Affected Versions: code-projects Product Inventory System version 1.0 Description: A critical issue affects the processing of the file "/admin/edit user.php". The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

7.2CVSS8.4AI score0.0033EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.3 views

PT-2025-27337 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical vulnerability was found in the code-projects Library System, affecting an unknown functionality of the file /profile.php. The manipulation of the image argument leads to...

9.8CVSS7.1AI score0.00325EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.3 views

PT-2025-27344 · Unknown · Code-Projects Simple Photo Gallery

Name of the Vulnerable Software and Affected Versions: code-projects Simple Photo Gallery version 1.0 Description: A critical issue was found in the code-projects Simple Photo Gallery. The problem is related to an unknown function of the file /upload-photo.php. The manipulation of the file img...

9.8CVSS7AI score0.00456EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.1 views

PT-2025-27349 · Code Projects · Code-Projects Simple Forum

Name of the Vulnerable Software and Affected Versions: code-projects Simple Forum version 1.0 Description: A critical issue was found in the code, affecting the /forum edit.php file. The manipulation of the iii argument leads to SQL injection. This issue can be exploited remotely. Recommendations...

9.8CVSS8.3AI score0.00332EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.5 views

PT-2025-27341 · Code Projects · Code-Projects Product Inventory System

Name of the Vulnerable Software and Affected Versions: code-projects Product Inventory System version 1.0 Description: A critical vulnerability was found in the code-projects Product Inventory System. This issue affects the Login component, specifically the file /index.php. The manipulation of th...

9.8CVSS8.1AI score0.00399EPSS
Exploits1References11
Rows per page
Query Builder