Lucene search
+L

4888 matches found

CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•20 views

Code-Projects Content Management System code-related vulnerabilities

Code-Projects Content Management System is an open source content and management system from Code-Projects. A code issue exists in Code-Projects Content Management System version 1.0 due to an unrestricted upload of the parameter image...

7.2CVSS5.4AI score0.00581EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•27 views

Code-Projects Online Bike Rental System code-related vulnerabilities

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

9.8CVSS6.6AI score0.00554EPSS
SaveExploits1References5
NVD
NVD
•added 2025/01/07 5:15 p.m.•55 views

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS0.00574EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/07 4:31 p.m.•60 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS0.0061EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/07 4:31 p.m.•21 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS6.4AI score0.0061EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/07 4:00 p.m.•41 views

CVE-2025-0298 code-projects Online Book Shop process_login.php sql injection

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00953EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2025-0300: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.4AI score0.00574EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•8 views

CVE-2025-0299: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

9.8CVSS6.4AI score0.0061EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2025-0297: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

6.5CVSS6.4AI score0.00697EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2025-0296: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unknown part of the file /booklist.php. The manipulation of the argument subcatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00725EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•7 views

PT-2025-3818

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A critical issue affects the processing of the file /process login.php, where the manipulation of the usernm argument leads to SQL injection. The attack can be initiated remotely...

9.8CVSS6.4AI score0.00953EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•9 views

PT-2025-3821

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A problematic issue has been found in the file /subcat.php, where the manipulation of the catnm argument leads to cross site scripting. This issue can be exploited remotely. The exploit ha...

6.1CVSS3.5AI score0.00425EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•23 views

PT-2025-3815

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A problem has been found in the software, affecting some unknown functionality of the file /booklist.php?subcatid=1. The issue is caused by the manipulation of the subcatnm argument, leadi...

5.4CVSS3.5AI score0.00478EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•26 views

PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

6.5CVSS6.3AI score0.00697EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•20 views

Code-Projects Online Book Shop Injection Vulnerabilities

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. An injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which stems from an SQL injection vulnerability in the cat parameter of the /subcat.php page...

8.8CVSS6.5AI score0.00574EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•19 views

Code-Projects Online Book Shop Security Vulnerabilities

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the usernm parameter of the /processlogin.php page...

9.8CVSS6.6AI score0.00953EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•17 views

Code-Projects Online Book Shop SQL Injection Vulnerability

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /detail.php page...

6.5CVSS6.6AI score0.00697EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•21 views

Code-Projects Online Book Shop SQL Injection Vulnerability

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

9.8CVSS6.5AI score0.00725EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•8 views

CVE-2025-0295: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /booklist.php?subcatid=1. The manipulation of the argument subcatnm leads to cross site scripting. The attack may be launched remotely. T...

5.4CVSS3.3AI score0.00478EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/01/05 9:15 p.m.•15 views

CVE-2025-0230

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00716EPSS
SaveExploits1References5
Rows per page
Query Builder