Lucene search
+L

4858 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•4 views

CVE-2025-3038: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS6.4AI score0.0067EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/30 12:00 a.m.•7 views

PT-2025-13646

Name of the Vulnerable Software and Affected Versions code-projects College Management System version 1.0 Description A critical issue was found in the College Management System, affecting the /Admin/student.php file. The manipulation of the profile image argument leads to unrestricted upload. Th...

9.8CVSS0.00523EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•2 views

CVE-2025-2854: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file updateemployee.php. The manipulation of the argument emptype leads to sql injection. The attack can be launched remotely. The...

8.8CVSS6.4AI score0.00534EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•4 views

CVE-2025-2673: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /homeemployee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploi...

5.4CVSS3.8AI score0.00347EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•18 views

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...

7.5CVSS7.1AI score0.00409EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•15 views

Code-Projects Payroll Management System 安全漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect operation of the parameter division that can lead to cross-site scripting...

5.4CVSS4.5AI score0.00347EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•4 views

CVE-2025-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS6.4AI score0.00409EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•2 views

PT-2025-12510

Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A vulnerability has been found in the code-projects Payroll Management System. The issue affects an unknown function of the file /home employee.php. The manipulation of the divisi...

5.4CVSS0.00347EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•3 views

PT-2025-12509

Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A critical issue affects the processing of the file /add deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS0.00409EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2025/03/21 12:00 a.m.•17 views

Code-Projects Human Resource Management System 安全漏洞

Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A security vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from an improperly authorized Index function in the handlerAccount.go...

9.8CVSS5.6AI score0.00464EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/03/21 12:00 a.m.•4 views

PT-2025-12417

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A vulnerability was found in the code-projects Human Resource Management System. It has been classified as problematic. The function UpdateRecruitmentById of the file...

5.4CVSS0.0033EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/03/21 12:00 a.m.•2 views

PT-2025-12416

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A critical issue affects the function Index of the file handlerAccount.go. The manipulation of the argument user cookie leads to improper authorization. The exploit has...

9.8CVSS0.00464EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/21 12:00 a.m.•5 views

CVE-2025-2590: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...

5.4CVSS3.7AI score0.0033EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/19 12:28 a.m.•28 views

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

5.5CVSS8.3AI score0.00235EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/19 12:26 a.m.•35 views

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

4.6CVSS6.2AI score0.00206EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/17 9:15 p.m.•20 views

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

4.6CVSS5.8AI score0.00206EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/17 9:15 p.m.•46 views

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

4.6CVSS0.00206EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/17 8:31 p.m.•44 views

CVE-2025-2393 code-projects Online Class and Exam Scheduling System salut_del.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salutdel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

5.8CVSS0.00407EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/17 8:00 p.m.•48 views

CVE-2025-2392 code-projects Online Class and Exam Scheduling System activate.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

5.8CVSS0.00502EPSS
SaveExploits1References5
NVD
NVD
•added 2025/03/17 7:15 p.m.•26 views

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

5.5CVSS0.00235EPSS
SaveExploits1References1
Rows per page
Query Builder