Lucene search
K

630 matches found

Vulnrichment
Vulnrichment
added 2025/03/04 4:0 a.m.8 views

CVE-2025-1903 Codezips Online Shopping Website cart_add.php sql injection

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

7.5CVSS7.5AI score0.00059EPSS
Exploits1References4
CVE
CVE
added 2025/03/04 4:0 a.m.60 views

CVE-2025-1903

CVE-2025-1903 affects Codezips Online Shopping Website 1.0. The vulnerability allows SQL injection by manipulating the id argument in /cart_add.php and can be exploited remotely. Multiple sources (NVD, Red Hat, CVE registries) describe a critical impact with high confidentiality, integrity, and a...

9.8CVSS7.4AI score0.00059EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/03/04 4:0 a.m.10 views

CVE-2025-1903 Codezips Online Shopping Website cart_add.php sql injection

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

7.5CVSS0.00059EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.1 views

Codezips Online Shopping Website 安全漏洞

Codezips Online Shopping Website is a Codezips open source online store system. A security vulnerability exists in Codezips Online Shopping Website version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

9.8CVSS7.7AI score0.00059EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/03/04 12:0 a.m.2 views

PT-2025-9717 · Unknown · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical vulnerability was found in the Codezips Gym Management System. The issue affects an unknown function of the file /change s pwd.php. The manipulation of the login id argument...

9.8CVSS7.6AI score0.00164EPSS
Exploits1References9
OSV
OSV
added 2025/03/03 9:15 a.m.0 views

CVE-2025-1858

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

9.8CVSS5.8AI score0.00223EPSS
Exploits1References4
NVD
NVD
added 2025/03/03 9:15 a.m.6 views

CVE-2025-1858

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

9.8CVSS0.00223EPSS
Exploits1References4
CVE
CVE
added 2025/03/03 8:31 a.m.43 views

CVE-2025-1858

Consolidated details from multiple sources confirm CVE-2025-1858 affects Codezips Online Shopping Website 1.0, with a SQL injection in the /success.php file triggered by manipulating the id parameter. Exploitation can be performed remotely, and public disclosures exist. No patch/version details o...

9.8CVSS7.6AI score0.00223EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/03/03 8:31 a.m.10 views

CVE-2025-1858 Codezips Online Shopping Website success.php sql injection

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

7.5CVSS0.00223EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/03/03 8:31 a.m.8 views

CVE-2025-1858 Codezips Online Shopping Website success.php sql injection

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

7.5CVSS7.6AI score0.00223EPSS
Exploits1References4
NVD
NVD
added 2025/03/03 8:15 a.m.7 views

CVE-2025-1856

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/geninvoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS0.00191EPSS
Exploits1References4
OSV
OSV
added 2025/03/03 8:15 a.m.0 views

CVE-2025-1856

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/geninvoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.8AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/03 7:31 a.m.8 views

CVE-2025-1856 Codezips Gym Management System gen_invoice.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/geninvoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

7.5CVSS7.5AI score0.00191EPSS
Exploits1References4
CVE
CVE
added 2025/03/03 7:31 a.m.52 views

CVE-2025-1856

CVE-2025-1856 affects Codezips Gym Management System 1.0. The vulnerability is an SQL injection in the /dashboard/admin/gen_invoice.php file, triggered by manipulating the id parameter. It can be exploited remotely and is labeled critical by sources. Public disclosures exist. Remediation/patch de...

9.8CVSS7.4AI score0.00191EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/03/03 7:31 a.m.8 views

CVE-2025-1856 Codezips Gym Management System gen_invoice.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/geninvoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

7.5CVSS0.00191EPSS
Exploits1References4
NVD
NVD
added 2025/03/03 7:15 a.m.8 views

CVE-2025-1854

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/delmember.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS0.00082EPSS
Exploits1References4
OSV
OSV
added 2025/03/03 7:15 a.m.0 views

CVE-2025-1854

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/delmember.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS6.5AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/03 6:31 a.m.11 views

CVE-2025-1854 Codezips Gym Management System del_member.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/delmember.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS6.8AI score0.00082EPSS
Exploits1References4
CVE
CVE
added 2025/03/03 6:31 a.m.43 views

CVE-2025-1854

CVE-2025-1854 affects Codezips Gym Management System 1.0. The vulnerability is in the file /dashboard/admin/del_member.php where manipulation of the argument name leads to SQL injection. The issue is exploitable remotely and has been disclosed publicly. Connected sources confirm a critical severi...

8.8CVSS7.4AI score0.00082EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/03/03 6:31 a.m.9 views

CVE-2025-1854 Codezips Gym Management System del_member.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/delmember.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS0.00082EPSS
Exploits1References4
Rows per page
Query Builder