Lucene search
K

3497 matches found

RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.4 views

CVE-2025-11512

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/votersadd.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely. The exploit has...

6.1CVSS5.5AI score0.00038EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.4 views

CVE-2025-11513

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplierupdate.php. This manipulation of the argument suppid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

9.8CVSS7AI score0.00058EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.5 views

PT-2025-41592

Name of the Vulnerable Software and Affected Versions code-projects Online Job Search Engine version 1.0 Description A SQL injection issue exists in code-projects Online Job Search Engine 1.0. The flaw is located in the handling of the txtusername parameter within the /registration.php script...

7.5CVSS7.6AI score0.00042EPSS
Exploits1References11
OSV
OSV
added 2025/10/09 9:15 p.m.2 views

CVE-2025-11558

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

9.8CVSS5.7AI score0.00044EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/09 9:2 p.m.3 views

CVE-2025-11558 code-projects E-Commerce Website user_index_search.php sql injection

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

7.5CVSS6.7AI score0.00044EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 9:2 p.m.7 views

CVE-2025-11558

CVE-2025-11558 affects code-projects E-Commerce Website 1.0, specifically the /pages/user_index_search.php file where the Search parameter can be manipulated to trigger SQL injection. Multiple connected sources (CNVD-2025-23975, RH:CVE-2025-11558, CNNVD-202510-1254, NVD/CVE-2025-11558, CVELIST) d...

9.8CVSS6.7AI score0.00044EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/09 9:2 p.m.6 views

CVE-2025-11558 code-projects E-Commerce Website user_index_search.php sql injection

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/userindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public a...

7.5CVSS0.00044EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 8:32 p.m.9 views

CVE-2025-11556

CVE-2025-11556 affects Code-Projects Simple Leave Manager 1.0. The vulnerability is a SQL injection in the /user.php file caused by improper handling/manipulation of the argument table, enabling remote exploitation. The exploit has been published and may be used. Impact is described as high for c...

9.8CVSS6.6AI score0.00042EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/09 7:32 p.m.5 views

CVE-2025-11553 code-projects Courier Management System add-courier.php sql injection

A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit ha...

6.5CVSS0.0004EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 7:2 p.m.9 views

CVE-2025-11552

Code-projects Online Complaint Site 1.0 contains an SQL injection in the /admin/category.php file caused by unsafely handling the Category parameter. Several connected sources (CNVD-2025-23959, RH: CVE-2025-11552, NVD/NVD mirrors, CNNVD-2025-1270, EUVD-2025-33580, CVELIST, etc.) describe remote e...

8.8CVSS6.8AI score0.0004EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/09 7:2 p.m.1 views

CVE-2025-11552 code-projects Online Complaint Site category.php sql injection

A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

6.5CVSS6.8AI score0.0004EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/09 7:2 p.m.5 views

CVE-2025-11552 code-projects Online Complaint Site category.php sql injection

A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

6.5CVSS0.0004EPSS
Exploits1References5
NVD
NVD
added 2025/10/09 6:15 p.m.1 views

CVE-2025-11551

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS0.0004EPSS
Exploits1References5
CVE
CVE
added 2025/10/09 6:2 p.m.8 views

CVE-2025-11551

CVE-2025-11551 affects Code-Projects Student Result Manager 1.0. The vulnerability is caused by manipulation of arguments in src/students/Database.java (roll/name/gpa) that leads to SQL injection. It can be triggered remotely and the exploit has been publicly disclosed. Connected sources (Red Hat...

9.8CVSS6.7AI score0.0004EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/09 6:2 p.m.6 views

CVE-2025-11551 code-projects Student Result Manager Database.java sql injection

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

6.5CVSS0.0004EPSS
Exploits1References5
OSV
OSV
added 2025/10/09 4:16 a.m.2 views

CVE-2025-11530

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

8.8CVSS5.7AI score
Exploits0References5
CVE
CVE
added 2025/10/09 3:32 a.m.10 views

CVE-2025-11530

The CVE-2025-11530 entry concerns code-projects Online Complaint Site 1.0. The vulnerability is in the file /cms/admin/state.php, where manipulation of the state parameter enables an SQL injection. This is a remote-exploit scenario, with public exploit material available. Connected sources confir...

8.8CVSS6.3AI score0.0004EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/09 3:32 a.m.8 views

CVE-2025-11530 code-projects Online Complaint Site state.php sql injection

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

6.5CVSS0.0004EPSS
Exploits1References5
NVD
NVD
added 2025/10/09 1:15 a.m.3 views

CVE-2025-11516

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS0.0004EPSS
Exploits1References5
OSV
OSV
added 2025/10/09 1:15 a.m.1 views

CVE-2025-11514

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...

8.8CVSS5.8AI score
Exploits0References5
Rows per page
Query Builder