CVE-2025-8498: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

CVE-2025-8497: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public an...

CVE-2025-8494: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/deletestudent.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

CVE-2025-8494 code-projects Intern Membership Management System delete_student.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/deletestudent.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

CVE-2025-8494

CVE-2025-8494 concerns code-projects Intern Membership Management System 1.0. The vulnerability is in the processing of the parameter ID in the file /admin/delete_student.php, where manipulation of ID leads to SQL injection. The issue is exploitable remotely and has been disclosed publicly. Conne...

CVE-2025-8493 code-projects Intern Membership Management System edit_student_query.php sql injection

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/editstudentquery.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2025-8376

A vulnerability classified as critical has been found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /updatebal.php. The manipulation of the argument company leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...

CVE-2025-8468 code-projects Wazifa System reset.php sql injection

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-8467

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

PT-2025-31758 · Code Projects · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 1.0 Description: A critical issue exists in code-projects Intern Membership Management System 1.0 related to the processing of the /admin/delete student.php API endpoint. Manipulation ...

CVE-2025-8466: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgotpassfarmer.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2025-8467: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

Code-Projects Online Farm System 注入漏洞

Code-Projects Online Farm System is a Code-Projects open source online farm system. An injection vulnerability exists in Code-Projects Online Farm System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter email in the file /forgotpassfarmer.php...

Code-Projects Wazifa System 注入漏洞

Code-Projects Wazifa System is a Code-Projects open source content management system. An injection vulnerability exists in Code-Projects Wazifa System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter email in the file /controllers/reset.php...

PT-2025-31756 · Unknown · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 1.0 Description: A critical vulnerability exists in code-projects Intern Membership Management System 1.0. The vulnerability affects unknown code within the /admin/edit student query.p...

PT-2025-31733 · Code Projects · Online Farm System

Name of the Vulnerable Software and Affected Versions: code-projects Online Farm System version 1.0 Description: A critical issue exists in code-projects Online Farm System 1.0. The vulnerability is due to a SQL injection flaw within an unknown function of the file /forgot passfarmer.php. The ema...

Code-Projects Wazifa System 注入漏洞

Code-Projects Wazifa System is a Code-Projects open source content management system. An injection vulnerability exists in Code-Projects Wazifa System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Username in the file /controllers/regcontrol.php...

CVE-2025-8443 code-projects Online Medicine Guide login.php sql injection

A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-8441 code-projects Online Medicine Guide pharsignup.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /pharsignup.php. The manipulation of the argument phuname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8435 code-projects Online Movie Streaming admin-control.php authorization

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-control.php. The manipulation of the argument ID leads to missing authorization. The attack can be launched...