Lucene search
+L

4742 matches found

Cvelist
Cvelist
•added 2026/01/28 8:32 p.m.•40 views

CVE-2026-1533 code-projects Online Music Site AdminAddCategory.php sql injection

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminAddCategory.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the...

5.8CVSS0.00406EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/28 8:32 p.m.•38 views

CVE-2026-1533

CVE-2026-1533 affects code-projects Online Music Site 1.0. The vulnerability is a remotely exploitable SQL injection in an unknown function of the file /Administrator/PHP/AdminAddCategory.php. Publicly available exploits/payloads have been released, increasing risk of remote compromise. No vendor...

9.8CVSS5.7AI score0.00406EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/28 3:17 a.m.•26 views

CVE-2025-69563

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter...

9.8CVSS5.9AI score0.00513EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•1 views

CVE-2026-1535: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Administrator/PHP/AdminReply.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7AI score0.00469EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•2 views

CVE-2026-1533: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminAddCategory.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the...

9.8CVSS5.3AI score0.00406EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•1 views

CVE-2026-1534: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

9.8CVSS7AI score0.00469EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•17 views

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters related to files, administrators, PHP, and...

9.8CVSS7.2AI score0.00469EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•19 views

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters related to files, administrators, and the...

9.8CVSS7.2AI score0.00469EPSS
SaveExploits1References6
NVD
NVD
•added 2026/01/27 5:16 p.m.•21 views

CVE-2025-69563

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter...

9.8CVSS0.00513EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/27 9:23 a.m.•18 views

CVE-2026-1421

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS4.2AI score0.00297EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•0 views

CVE-2025-69559: Unrestricted Upload of File with Dangerous Type

code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...

9.8CVSS5.7AI score0.00581EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•18 views

Code-Projects Mobile Shop Management System security vulnerabilities

Code-Projects Mobile Shop Management System is an open-source mobile store management system developed by Code-Projects. Version 1.0 of the code-projects Mobile Shop Management System contains a security vulnerability. This vulnerability stems from improper handling of the userid parameter in the...

9.8CVSS5.8AI score0.00513EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/27 12:00 a.m.•29 views

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to an unrestricted file upload in the admin_add.php component. This vulnerability allows for the upload of files with dangerous types. While the documents confirm the existence of the vulnerability and its location, specific exploitation details...

9.8CVSS5.9AI score0.00581EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•0 views

CVE-2025-69563: Improper Neutralization of Special Elements used in an SQL Command

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter...

9.8CVSS5.8AI score0.00513EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•17 views

Code-Projects Computer Book Store Security Vulnerabilities

Code-Projects Computer Book Store is an open-source computer bookstore developed by Code-Projects. Version 1.0 of Code-Projects Computer Book Store contains a security vulnerability, which stems from a file upload vulnerability in the adminadd.php file...

9.8CVSS5.8AI score0.00581EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•21 views

Code-Projects Mobile Shop Management System security vulnerabilities

Code-Projects Mobile Shop Management System is an open-source mobile store management system developed by Code-Projects. Version 1.0 of the Code-Projects Mobile Shop Management System contains a security vulnerability. This vulnerability stems from improper handling of the Password parameter in t...

9.8CVSS5.8AI score0.00513EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•0 views

CVE-2025-69562: Improper Neutralization of Special Elements used in an SQL Command

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter...

9.8CVSS5.8AI score0.00513EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•0 views

CVE-2025-69565: Unrestricted Upload of File with Dangerous Type

code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php...

9.8CVSS5.7AI score0.00491EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/26 8:16 p.m.•10 views

CVE-2026-1443

A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published an...

9.8CVSS5.7AI score0.00562EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/26 8:02 p.m.•12 views

CVE-2026-1443 code-projects Online Music Site AdminDeleteUser.php sql injection

A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published an...

7.5CVSS5.7AI score0.00562EPSS
SaveExploits1References5
Rows per page
Query Builder