Lucene search
+L

4888 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•14 views

CVE-2025-0200: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /user/searchnum.php. The manipulation of the argument search leads to sql injection. The attack can...

6.5CVSS6.4AI score0.00528EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/04 12:00 a.m.•21 views

PT-2025-3777 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue affects the processing of the file /details.php, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. The exploit has...

9.8CVSS6.3AI score0.00624EPSS
SaveExploits1References12
Cvelist
Cvelist
•added 2025/01/03 10:31 p.m.•51 views

CVE-2025-0199 code-projects Point of Sales and Inventory Management System minus_cart.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minuscart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

6.5CVSS0.00435EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/03 7:00 p.m.•22 views

CVE-2025-0196 code-projects Point of Sales and Inventory Management System plist.php sql injection

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/03 6:00 p.m.•86 views

CVE-2025-0195

CVE-2025-0195 concerns Code Projects’ Point of Sales and Inventory Management System v1.0. The vulnerability is in the file /user/del_product.php, where manipulating the id argument enables SQL injection. The attack is described as executable remotely, and the exploit has been disclosed publicly ...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/01/03 1:15 a.m.•20 views

CVE-2025-0175

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

6.1CVSS3.3AI score0.00404EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/03 1:00 a.m.•61 views

CVE-2025-0175 code-projects Online Shop view.php cross site scripting

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS0.00404EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/03 12:31 a.m.•87 views

CVE-2025-0174

CVE-2025-0174 affects code-projects Point of Sales and Inventory Management System 1.0. The vulnerability resides in /user/search_result2.php (Parameter Handler) where the search parameter handling enables remote SQL injection. Exploitation has been disclosed publicly and is corroborated by multi...

6.5CVSS6.3AI score0.00435EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•10 views

CVE-2025-0199: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minuscart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•9 views

CVE-2025-0197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•8 views

CVE-2025-0196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•8 views

CVE-2025-0195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/delproduct.php. The manipulation of the argument id leads to sql injection. The attack may be launch...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•7 views

CVE-2025-0175: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

6.1CVSS3.3AI score0.00404EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•9 views

CVE-2025-0174: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/searchresult2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. I...

6.5CVSS6.3AI score0.00435EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•7 views

PT-2025-3769

Name of the Vulnerable Software and Affected Versions code-projects Point of Sales and Inventory Management System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown part of the file /user/plist.php. The manipulation of the cat argument leads to SQ...

6.5CVSS6.2AI score0.00435EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•27 views

PT-2025-3770 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue was found in the code-projects Point of Sales and Inventory Management System. This issue affects the /user/search.php file, where the...

6.5CVSS6.3AI score0.00435EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•24 views

PT-2025-3764 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop version 1.0 Description: A problem has been found in the code that affects the /view.php file. Manipulating the name/details argument leads to cross site scripting attacks. These attacks can be started from a remote...

6.1CVSS4.2AI score0.00404EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•24 views

Code-Projects Point of Sales and Inventory Management System SQL Injection Vulnerabilities

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•25 views

Code-Projects Point of Sales and Inventory Management System Injection Vulnerabilities

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•22 views

Code-Projects Point of Sales and Inventory Management System Injection Vulnerabilities

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which stems from an SQL injection...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits1References5
Rows per page
Query Builder