Lucene search
K

3502 matches found

Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.5 views

PT-2025-3456 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The file upload feature in the affected system does not validate file extensions or MIME types, allowing an attacker to upload a PHP shell without restrictions and execute comman...

6.5CVSS8.5AI score0.02311EPSS
Exploits3References6
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.5 views

PT-2025-3457 · Unknown · Code-Projects Online Car Rental System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Car Rental System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the vehicalorcview parameter in the "/admin/edit-vehicle.php" API endpoint. This flaw can be exploited by attackers to inject...

6.5CVSS7.3AI score0.02311EPSS
Exploits3References7
Cvelist
Cvelist
added 2025/01/09 7:0 a.m.28 views

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00627EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

Code-Projects Admission Management System 注入漏洞

Code-Projects Admission Management System is a Code-Projects open source enrollment management system. Code-Projects Admission Management System version 1.0 suffers from an injection vulnerability, which stems from an SQL injection in the parameter uid...

9.8CVSS7.9AI score0.00686EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A code issue exists in Code-Projects Content Management System version 1.0 due to an unrestricted upload of the parameter image...

7.2CVSS5.2AI score0.00532EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

Code-Projects Online Bike Rental System 代码问题漏洞

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

9.8CVSS6.7AI score0.00507EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.5 views

PT-2025-3841 · Unknown · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Content Management System version 1.0 Description: A critical issue has been found in the code-projects Content Management System. It affects an unknown part of the file /admin/publishnews.php of the component Publish News Page...

7.2CVSS5.1AI score0.00532EPSS
Exploits1References9
NVD
NVD
added 2025/01/07 5:15 p.m.23 views

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS0.00525EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/01/07 4:31 p.m.13 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS7.4AI score0.00558EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/07 4:31 p.m.32 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS0.00558EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/07 4:0 p.m.15 views

CVE-2025-0298 code-projects Online Book Shop process_login.php sql injection

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00873EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.3 views

PT-2025-3815 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A problem was found in the file /booklist.php?subcatid=1, where the manipulation of the subcatnm argument leads to cross site scripting. The attack may be launched remotely...

5.3CVSS3.5AI score0.00448EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.2 views

Code-Projects Online Book Shop 注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. An injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which stems from an SQL injection vulnerability in the cat parameter of the /subcat.php page...

8.8CVSS7AI score0.00525EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.3 views

Code-Projects Online Book Shop 安全漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the usernm parameter of the /processlogin.php page...

9.8CVSS7AI score0.00873EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.3 views

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /detail.php page...

6.5CVSS7AI score0.00629EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.4 views

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

9.8CVSS7AI score0.00664EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.3 views

PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

6.5CVSS6.8AI score0.00629EPSS
Exploits1References8
OSV
OSV
added 2025/01/05 9:15 p.m.2 views

CVE-2025-0230

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/01/05 9:0 p.m.11 views

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS7AI score0.00655EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/05 9:0 p.m.16 views

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS0.00655EPSS
Exploits1References5
Rows per page
Query Builder