Lucene search
+L

1558 matches found

Cvelist
Cvelist
added 2025/12/18 11:32 p.m.36 views

CVE-2025-14897 CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is...

5.8CVSS0.00318EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/18 11:32 p.m.16 views

CVE-2025-14897

CVE-2025-14897 affects CodeAstro Real Estate Management System 1.0, with the vulnerability located in the Administrator Endpoint’s /admin/useragentdelete.php function. The issue enables SQL injection via parameter handling in that file, allowing remote initiation. Public exploit code exists, indi...

7.2CVSS5.1AI score0.00318EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 11:32 p.m.5 views

CVE-2025-14897 CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is...

5.8CVSS6.8AI score0.00318EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.9 views

PT-2025-52377

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...

5.8CVSS7AI score0.00318EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.8 views

PT-2025-52376

Name of the Vulnerable Software and Affected Versions CodeAstro Real Estate Management System version 1.0 Description A flaw exists in CodeAstro Real Estate Management System that allows for sql injection. The issue is located in the Administrator Endpoint, specifically within the file...

7.2CVSS5AI score0.00318EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2025/11/18 1:5 p.m.13 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS7.2AI score0.00376EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/17 3:30 p.m.10 views

EUVD-2025-197791

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00376EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/17 1:15 p.m.9 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.7AI score0.00376EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/17 1:15 p.m.10 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS0.00376EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/17 1:2 p.m.27 views

CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS0.00376EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/17 1:2 p.m.16 views

CVE-2025-13280

CVE-2025-13280 affects CodeAstro Simple Inventory System 1.0, specifically the Login component’s /index.php where manipulating the Username parameter enables SQL injection. Multiple connected sources confirm the flaw is exploitable remotely and that exploits have been publicly disclosed. The vuln...

9.8CVSS7.2AI score0.00376EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 1:2 p.m.3 views

CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS7.2AI score0.00376EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.14 views

CodeAstro Simple Inventory System SQL注入漏洞

CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...

9.8CVSS7.8AI score0.00376EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/11/15 6:42 p.m.14 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS6.4AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/14 6:15 p.m.10 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS0.00279EPSS
SaveExploits0References5
OSV
OSV
added 2025/11/14 6:15 p.m.5 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS5.8AI score0.00279EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/11/14 6:2 p.m.7 views

EUVD-2025-197639

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS6.5AI score0.00279EPSS
SaveExploits0References7
CVE
CVE
added 2025/11/14 6:2 p.m.17 views

CVE-2025-13172

CVE-2025-13172 affects CodeAstro Gym Management System 1.0. A SQL injection vulnerability exists in an unknown function of /admin/view-member-report.php triggered by manipulating the ID parameter. Exploitation is possible remotely, and public exploits have been released. NVD reports a high-severi...

8.8CVSS6.4AI score0.00279EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/14 6:2 p.m.4 views

CVE-2025-13172 CodeAstro Gym Management System view-member-report.php sql injection

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS6.4AI score0.00279EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.19 views

PT-2025-46990

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A security flaw exists in CodeAstro Gym Management System version 1.0. The issue involves a SQL injection impacting an unknown function within the /admin/view-member-report.php file...

6.5CVSS7.4AI score0.00279EPSS
SaveExploits0References8
Rows per page
Query Builder