Lucene search
+L

4878 matches found

RedhatCVE
RedhatCVE
•added 2025/07/27 6:20 p.m.•27 views

CVE-2025-8164

A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file sendmessage.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

8.8CVSS6.4AI score0.00444EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/07/27 6:02 p.m.•13 views

CVE-2025-8237 code-projects Exam Form Submission update_s1.php sql injection

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updates1.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS7AI score0.00566EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/27 6:02 p.m.•34 views

CVE-2025-8237 code-projects Exam Form Submission update_s1.php sql injection

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updates1.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS0.00566EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/27 5:32 p.m.•56 views

CVE-2025-8236

CVE-2025-8236 concerns the code-projects Online Ordering System 1.0. Multiple connected sources confirm a SQL injection vulnerability in the file /admin/edit_product.php, triggered by manipulating the Name argument. The issue is described as remote-exploitable and publicly disclosed across CVE li...

9.8CVSS7.1AI score0.00566EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/07/27 4:02 p.m.•30 views

CVE-2025-8235 code-projects Online Ordering System product.php sql injection

A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/product.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

7.5CVSS0.00559EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/27 2:32 p.m.•30 views

CVE-2025-8233 code-projects Online Ordering System user.php sql injection

A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...

7.5CVSS0.00559EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/07/27 2:32 p.m.•11 views

CVE-2025-8233 code-projects Online Ordering System user.php sql injection

A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...

7.5CVSS7AI score0.00559EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/07/27 12:00 a.m.•20 views

PT-2025-31008 · Code Projects · Code-Projects Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A vulnerability exists in the Online Ordering System related to SQL injection. The issue is located in the /admin/delete member.php file. Manipulation of the ID argument can lead t...

9.8CVSS7.2AI score0.00559EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•4 views

CVE-2025-8239: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS7.1AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•9 views

CVE-2025-8238: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates2.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•8 views

CVE-2025-8235: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/product.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

9.8CVSS7AI score0.00559EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•12 views

CVE-2025-8240: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /user/dashboard.php. The manipulation of the argument phone leads to sql injection. The attack may be launched remotely. Th...

9.8CVSS7AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•6 views

CVE-2025-8237: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updates1.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has be...

9.8CVSS7.1AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•9 views

CVE-2025-8236: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7.1AI score0.00566EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•7 views

CVE-2025-8234: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7AI score0.00559EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•8 views

CVE-2025-8233: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...

9.8CVSS7AI score0.00559EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/27 12:00 a.m.•7 views

CVE-2025-8232: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS7AI score0.00559EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/27 12:00 a.m.•18 views

Code-Projects Online Ordering System Injection Vulnerabilities

Online Ordering System is an online ordering system. Online Ordering System has a SQL injection vulnerability that originates from an unfiltered parameter un in the /admin/user.php file that allows manipulation of database queries. No details of the vulnerability are available at this time...

9.8CVSS7.1AI score0.00559EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/27 12:00 a.m.•18 views

Code-Projects Online Ordering System Injection Vulnerabilities

Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.1AI score0.00559EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/27 12:00 a.m.•19 views

Code-Projects Exam Form Submission Injection Vulnerability

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in Code-Projects Exam Form Submission version 1.0, which originates from SQL injection due to incorrect manipulation of parameter credits in file /admin/updates2.php...

9.8CVSS7.2AI score0.00566EPSS
SaveExploits1References6
Rows per page
Query Builder