Code-Projects Simple Scheduling System SQL注入漏洞

Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addsubject.php file not securely filtering the subcode parameter. No details of the vulnerability are available at this time...

PT-2025-39777

Name of the Vulnerable Software and Affected Versions Campcodes Computer Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Computer Sales and Inventory System version 1.0 that allows for remote SQL injection. The issue is located in the file /pages/us edit.php and...

PT-2025-39789

Name of the Vulnerable Software and Affected Versions CodeAstro Student Grading System version 1.0 Description A flaw exists in the processing of the /adminLogin.php file within CodeAstro Student Grading System. Manipulation of the staffId argument can lead to a SQL injection. This issue is...

CVE-2025-11040

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/modusers/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit...

CVE-2025-11077

A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/addcontent.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclose...

CVE-2025-11077 Campcodes Online Learning Management System add_content.php sql injection

A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/addcontent.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclose...

CVE-2025-11077

CVE-2025-11077 affects Campcodes Online Learning Management System 1.0. The vulnerability is a SQL injection in the /admin/add_content.php file, triggered by manipulating the Title argument. It is exploitable remotely and has been publicly disclosed. The connected reports consistently describe th...

CVE-2025-11075

A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/deactivate.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2025-11075 Campcodes Online Learning Management System de_activate.php sql injection

A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/deactivate.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

CVE-2025-11074

Affected software: code-projects Project Monitoring System 1.0. Vulnerability: SQL injection in the login.php file caused by unsafe handling of username/password inputs, enabling remote exploitation. Root cause/condition: Manipulation of the parameters in /login.php leads to SQL injection; exploi...

CVE-2025-11066

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2025-11066 code-projects Online Bidding System bidlist.php sql injection

A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2025-11063

The CVE-2025-11063 entry concerns Campcodes Online Learning Management System v1.0. The vulnerability resides in the /admin/edit_department.php handler, where manipulating the d parameter leads to a SQL injection. This exploitable condition can be triggered remotely, and publicly available exploi...

CVE-2025-11062

A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/savestudent.php. Executing manipulation of the argument classid can lead to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-11057

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/printinv.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-11052

CVE-2025-11052 affects kidaze CourseSelectionSystem version 1.0/5.php, with the vulnerability located in /Profilers/PriProfile/COUNT3s5.php where manipulating the csslc parameter leads to SQL injection. The issue is exploitable remotely and an exploit has been publicly released. Multiple sources ...

CVE-2025-59939 WeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.

WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php endpoint with the following parameters: nomeClasse=ProdutoControle&metodo=excluir&idproduto=malicious command. It is necessary to apply prepared statements...

SourceCodester Online Hotel Reservation System SQL注入漏洞

SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. A SQL injection vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which originates from the incorrect operation of the parameter address in the file...

PT-2025-39722

Name of the Vulnerable Software and Affected Versions SourceCodester Online Hotel Reservation System version 1.0 Description A SQL injection issue exists in SourceCodester Online Hotel Reservation System version 1.0. The issue is located in the file /admin/updateaddress.php. Manipulation of the...