Lucene search
+L

1862 matches found

Vulnrichment
Vulnrichment
•added 2025/12/18 11:32 p.m.•12 views

CVE-2025-14897 CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.php of the component Administrator Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit is...

5.8CVSS5.4AI score0.00364EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•19 views

PT-2025-52377

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php of the component Administrator Endpoint. The manipulation results in sql injection. The attack can be launched remotely. The exploit has be...

5.8CVSS7AI score0.00364EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•14 views

PT-2025-52376

Name of the Vulnerable Software and Affected Versions CodeAstro Real Estate Management System version 1.0 Description A flaw exists in CodeAstro Real Estate Management System that allows for sql injection. The issue is located in the Administrator Endpoint, specifically within the file...

7.2CVSS5AI score0.00364EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/11/18 1:05 p.m.•18 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS7.2AI score0.00384EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/17 3:30 p.m.•16 views

EUVD-2025-197791

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00384EPSS
SaveExploits1References6
OSV
OSV
•added 2025/11/17 1:15 p.m.•15 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.7AI score0.00384EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/17 1:15 p.m.•18 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS0.00384EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/17 1:02 p.m.•7 views

CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS6.9AI score0.00384EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/11/17 1:02 p.m.•15 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS7AI score0.00384EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2025/11/17 1:02 p.m.•29 views

CVE-2025-13280

CVE-2025-13280 affects CodeAstro Simple Inventory System 1.0, specifically the Login component’s /index.php where manipulating the Username parameter enables SQL injection. Multiple connected sources confirm the flaw is exploitable remotely and that exploits have been publicly disclosed. The vuln...

9.8CVSS6.9AI score0.00384EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/17 1:02 p.m.•40 views

CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

7.5CVSS0.00384EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

CodeAstro Simple Inventory System SQL注入漏洞

CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...

9.8CVSS7.8AI score0.00384EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13280: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.5AI score0.00384EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/15 6:42 p.m.•24 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS6.4AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/14 6:15 p.m.•22 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS0.00285EPSS
SaveExploits0References5
OSV
OSV
•added 2025/11/14 6:15 p.m.•12 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS5.8AI score0.00285EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2025/11/14 6:02 p.m.•7 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS6.5AI score0.00285EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2025/11/14 6:02 p.m.•14 views

EUVD-2025-197639

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS6.5AI score0.00285EPSS
SaveExploits0References7
CVE
CVE
•added 2025/11/14 6:02 p.m.•35 views

CVE-2025-13172

CVE-2025-13172 affects CodeAstro Gym Management System 1.0. A SQL injection vulnerability exists in an unknown function of /admin/view-member-report.php triggered by manipulating the ID parameter. Exploitation is possible remotely, and public exploits have been released. NVD reports a high-severi...

8.8CVSS6.5AI score0.00285EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/14 6:02 p.m.•8 views

CVE-2025-13172 CodeAstro Gym Management System view-member-report.php sql injection

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS6.5AI score0.00285EPSS
SaveExploits0References5
Rows per page
Query Builder