Lucene search
+L

4888 matches found

NVD
NVD
•added 2025/02/06 7:15 p.m.•63 views

CVE-2024-57668

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...

8.8CVSS0.00698EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/02/06 12:00 a.m.•52 views

CVE-2024-57668

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...

0.00698EPSS
SaveExploits1References2
CVE
CVE
•added 2025/02/06 12:00 a.m.•101 views

CVE-2024-57668

CVE-2024-57668 concerns Code-projects Shopping Portal v1.0 where insert-product.php contains an arbitrary file upload vulnerability. Multiple connected sources confirm the flaw, tying it to the insert-product.php upload handling, with potential impacts on confidentiality, integrity, and availabil...

8.8CVSS6AI score0.00698EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/06 12:00 a.m.•15 views

CVE-2024-57668

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...

6AI score0.00698EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•8 views

CVE-2024-57668: Unrestricted Upload of File with Dangerous Type

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...

8.8CVSS6AI score0.00698EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/06 12:00 a.m.•11 views

PT-2025-5855

Name of the Vulnerable Software and Affected Versions Code-projects Shopping Portal version 1.0 Description The issue concerns an arbitrary file upload vulnerability in the insert-product.php page. This means that an attacker could potentially upload malicious files to the server, which could lea...

8.8CVSS6AI score0.00698EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/02/06 12:00 a.m.•23 views

Code-Projects Shopping Portal Security Vulnerabilities

Code-Projects Shopping Portal is a Code-Projects open source shopping website. A security vulnerability exists in Code-Projects Shopping Portal v1.0, which originates from an arbitrary file upload vulnerability in the insert-product.php page...

8.8CVSS6AI score0.00698EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/02/05 5:19 a.m.•22 views

CVE-2024-1829

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

9.8CVSS7AI score0.0076EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:18 a.m.•24 views

CVE-2024-1830

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

9.8CVSS7.1AI score0.00813EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:35 p.m.•18 views

CVE-2024-8167

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

9.8CVSS7AI score0.00648EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/02 3:31 p.m.•23 views

CVE-2025-0967 code-projects Chat System add_chatroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/addchatroom.php. The manipulation of the argument chatname/chatpass leads to sql injection. The attack may be initiated remotely. The exploit has bee...

6.5CVSS6.4AI score0.00599EPSS
SaveExploits1References5
CVE
CVE
•added 2025/02/02 3:31 p.m.•105 views

CVE-2025-0967

CVE-2025-0967 affects Code-Projects Chat System 1.0. The vulnerability is a SQL injection in the file /user/add_chatroom.php, caused by unsafely handling the chatname/chatpass parameters. The issue is exploitable remotely and could allow an attacker to manipulate SQL statements, potentially expos...

7.5CVSS6.4AI score0.00599EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/02 12:00 a.m.•7 views

CVE-2025-0967: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/addchatroom.php. The manipulation of the argument chatname/chatpass leads to sql injection. The attack may be initiated remotely. The exploit has bee...

7.5CVSS6.4AI score0.00599EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/02 12:00 a.m.•26 views

PT-2025-4115 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue affects some unknown processing of the file /user/add chatroom.php. The manipulation of the argument chatname/chatpass leads to SQL injection. The attack may be initiated...

7.5CVSS6.3AI score0.00599EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/01 12:00 a.m.•9 views

CVE-2025-0961: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /parse/loadjob-details.php. The manipulation of the argument businessstreamname/companywebsiteurl leads to cross site...

5.4CVSS3.4AI score0.00417EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/31 7:31 p.m.•49 views

CVE-2025-0934 code-projects Job Recruitment _call_job_search_ajax.php sql injection

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/calljobsearchajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS0.00401EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/31 7:31 p.m.•102 views

CVE-2025-0934

CVE-2025-0934 affects code-projects Job Recruitment 1.0. The vulnerability stems from unsafely handling the n argument in the file /parse/_call_job_search_ajax.php, enabling SQL injection and potentially allowing remote exploitation. Multiple connected sources corroborate a remote-access risk wit...

7.5CVSS6.3AI score0.00401EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•9 views

CVE-2025-0934: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/calljobsearchajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS6.3AI score0.00401EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•33 views

Code-Projects Job Recruitment Injection Vulnerabilities

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from a manipulation of the parameter n that can lead to SQL injection...

7.5CVSS6.5AI score0.00401EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/31 12:00 a.m.•32 views

PT-2025-4102 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code, classified as problematic. It affects an unknown part of the file /parse/ call job search ajax.php. The manipulation of the n argument leads to...

7.5CVSS6.1AI score0.00401EPSS
SaveExploits1References9
Rows per page
Query Builder