Lucene search
+L

13 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•0 views

CVE-2026-7070: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the...

7.5CVSS5.5AI score0.00411EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-18844

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00481EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/30 9:32 a.m.•40 views

CVE-2025-6901

The CVE-2025-6901 entry refers to code-projects Inventory Management System 1.0 with a SQL injection in the userid parameter of the /php_action/removeUser.php endpoint. The vulnerability is remote-exploitable and has publicly disclosed exploits. Connected sources consistently identify the affecte...

9.8CVSS7.5AI score0.00454EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•21 views

PT-2025-27415 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the Username argument in an unknown function of the file /php action/createUser.ph...

9.8CVSS8AI score0.00454EPSS
SaveExploits1References11
CVE
CVE
•added 2025/06/28 7:31 p.m.•43 views

CVE-2025-6823

CVE-2025-6823 affects code-projects Inventory Management System 1.0. The vulnerability arises from improper handling of the editProductName parameter in /php_action/editProduct.php, enabling SQL injection. Exploitation is described as remote and the exploit has been disclosed publicly. Connected ...

9.8CVSS7.5AI score0.00454EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/28 7:31 p.m.•12 views

CVE-2025-6823 code-projects Inventory Management System editProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated...

7.5CVSS7.6AI score0.00454EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•19 views

PT-2025-27322 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /php action/createOrder.php, leading to sql injection. The manipulation can be initiated remotely...

9.8CVSS7.7AI score0.00454EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•29 views

PT-2025-27334 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This issue affects unknown code of the file /php action/editPayment.php. The manipulation ...

9.8CVSS8.2AI score0.00486EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•17 views

PT-2025-27329 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This affects an unknown part of the file /php action/editOrder.php. The manipulation leads...

9.8CVSS8.1AI score0.0047EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2025/06/25 8:31 p.m.•9 views

CVE-2025-6665 code-projects Inventory Management System editBrand.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...

7.5CVSS7.6AI score0.00448EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•18 views

PT-2025-26843 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been identified, affecting the file /php action/createBrand.php. The manipulation of the brandStatus argument leads to SQL injection. This issue can be...

9.8CVSS7.7AI score0.00448EPSS
SaveExploits1References9
CVE
CVE
•added 2025/06/23 3:00 a.m.•40 views

CVE-2025-6501

Code-projects Inventory Management System 1.0 has a SQL injection in the /php_action/createCategories.php endpoint, triggered by the categoriesStatus parameter. The issue is remotely exploitable and the exploit has been publicly disclosed. Publicly accessible documents describe the vulnerability ...

9.8CVSS7.5AI score0.00487EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•16 views

PT-2025-26579 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This affects an unknown part of the file /php action/createCategories.php. The manipulatio...

9.8CVSS7.5AI score0.00487EPSS
SaveExploits1References12
Rows per page
Query Builder