CVE-2025-6827: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /phpaction/editOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2025-6823: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated...

CVE-2025-6819: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/removeBrand.php. The manipulation of the argument brandId leads to sql injection. The attack can be launche...

CVE-2025-6822: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely...

CVE-2025-6826: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /PayrollManagementSystem/ajax.php?action=savedepartment. The manipulation of the argument ID leads to sql injection. T...

PT-2025-27332 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Inventory Management System, affecting unknown code of the file /orders.php. The manipulation of the argument i...

PT-2025-27329 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This affects an unknown part of the file /php action/editOrder.php. The manipulation leads...

CVE-2025-6820: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /phpaction/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched...

CVE-2025-6821: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /phpaction/createOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-27334 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability was found in the code-projects Inventory Management System. This issue affects unknown code of the file /php action/editPayment.php. The manipulation ...

CVE-2025-6778

CVE-2025-6778 affects code-projects Food Distributor Site 1.0. The vulnerability is an XSS in an unknown function of /admin/save_settings.php, triggered by manipulating the arguments site_phone, site_email, or address. It can be exploited remotely, and multiple sources indicate the exploit has be...

Code-Projects Food Distributor Site 代码注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. A code injection vulnerability exists in Code-Projects Food Distributor Site version 1.0, which originates from cross-site scripting due to incorrect operation of the parameters sitephone/siteemail/address i...

PT-2025-27258 · Unknown · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A vulnerability was found in the code-projects Food Distributor Site, affecting an unknown function of the file /admin/save settings.php. The manipulation of the argument site phone...

CVE-2025-6778: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Food Distributor Site 1.0. Affected is an unknown function of the file /admin/savesettings.php. The manipulation of the argument sitephone/siteemail/address leads to cross site scripting. It is possible to launch the...

CVE-2025-6777: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue affects some unknown processing of the file /admin/processlogin.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated...

Code-Projects Food Distributor Site 注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. Code-Projects Food Distributor Site version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameters username/password in the file...

PT-2025-27257 · Code Projects · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A critical issue has been found in the processing of the file /admin/process login.php. The manipulation of the username and password arguments leads to SQL injection. The attack ma...

CVE-2025-6667

A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit h...

CVE-2025-6668 code-projects Inventory Management System fetchSelectedBrand.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /phpaction/fetchSelectedBrand.php. The manipulation of the argument brandId leads to sql injection. It is possible to initiate the attack...

CVE-2025-6668

Code-projects Inventory Management System 1.0 contains a SQL injection in /php_action/fetchSelectedBrand.php via the brandId parameter. The issue is exploitable remotely and has public disclosure, with impact on confidentiality, integrity, and availability as described in multiple sources. No con...