Lucene search
K

1283 matches found

Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.2 views

PT-2025-52397

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. T...

5.8CVSS7.2AI score0.00008EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/18 11:32 p.m.1 views

CVE-2025-14898 CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...

5.8CVSS5AI score0.00026EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2025/12/18 11:32 p.m.2 views

CVE-2025-14898

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...

7.2CVSS5.3AI score0.00026EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/12/18 11:32 p.m.8 views

CVE-2025-14898

CVE-2025-14898 affects CodeAstro Real Estate Management System 1.0. In the file /admin/userbuilderdelete.php of the Administrator Endpoint , there is an input handling flaw that enables SQL injection . The issue is exploitable remotely and the exploit has been publicly released. The Red Hat/ENISA...

7.2CVSS5AI score0.00026EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/18 11:32 p.m.27 views

CVE-2025-14898 CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...

5.8CVSS0.00026EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/18 11:32 p.m.21 views

CVE-2025-14897 CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is...

5.8CVSS0.00026EPSS
Exploits1References5
CVE
CVE
added 2025/12/18 11:32 p.m.6 views

CVE-2025-14897

CVE-2025-14897 affects CodeAstro Real Estate Management System 1.0, with the vulnerability located in the Administrator Endpoint’s /admin/useragentdelete.php function. The issue enables SQL injection via parameter handling in that file, allowing remote initiation. Public exploit code exists, indi...

7.2CVSS5.1AI score0.00026EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 11:32 p.m.3 views

CVE-2025-14897 CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is...

5.8CVSS6.8AI score0.00026EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.2 views

PT-2025-52376

Name of the Vulnerable Software and Affected Versions CodeAstro Real Estate Management System version 1.0 Description A flaw exists in CodeAstro Real Estate Management System that allows for sql injection. The issue is located in the Administrator Endpoint, specifically within the file...

7.2CVSS5AI score0.00026EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.2 views

PT-2025-52377

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...

5.8CVSS7AI score0.00026EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/18 1:5 p.m.3 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS7.2AI score0.00029EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/17 3:30 p.m.1 views

EUVD-2025-197791

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00029EPSS
Exploits1References6
OSV
OSV
added 2025/11/17 1:15 p.m.0 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.7AI score0.00029EPSS
Exploits1References5
NVD
NVD
added 2025/11/17 1:15 p.m.1 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS0.00029EPSS
Exploits1References5
CVE
CVE
added 2025/11/17 1:2 p.m.5 views

CVE-2025-13280

CVE-2025-13280 affects CodeAstro Simple Inventory System 1.0, specifically the Login component’s /index.php where manipulating the Username parameter enables SQL injection. Multiple connected sources confirm the flaw is exploitable remotely and that exploits have been publicly disclosed. The vuln...

9.8CVSS7.2AI score0.00029EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/17 1:2 p.m.6 views

CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS0.00029EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 1:2 p.m.1 views

CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS7.2AI score0.00029EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.1 views

CodeAstro Simple Inventory System SQL注入漏洞

CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...

9.8CVSS7.8AI score0.00029EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/15 6:42 p.m.2 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS6.4AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/11/14 6:15 p.m.0 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS5.8AI score
Exploits0References5
Rows per page
Query Builder