CVE-2025-1168

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

CVE-2025-1168 SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

CVE-2025-1168

CVE-2025-1168 affects SourceCodester Contact Manager with Export to VCF 1.0. The vulnerability resides in /endpoint/delete-contact.php where manipulating the contact argument leads to SQL injection. Impact is described as remote, with high confidentiality/integrity/availability implications in mu...

CVE-2025-1168 SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

CVE-2025-1168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated...

PT-2025-7144

Name of the Vulnerable Software and Affected Versions: Q-Free MaxTime versions prior to 2.11.0 Description: A Path Traversal issue in the maxtime/api/database/database.lua file allows an authenticated remote attacker to delete sensitive files via crafted HTTP requests. Recommendations: For versio...

PT-2025-6142

Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager with Export to VCF version 1.0 Description: A critical issue has been found in the SourceCodester Contact Manager with Export to VCF. The problem affects the /endpoint/delete-contact.php file, where the...

PT-2025-6246 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.8R1 Description: The issue is related to insufficient permissions in the Ivanti Secure Access Client, allowing a local authenticated attacker to delete arbitrary files. Recommendations: For...

Ivanti Secure Access Client security vulnerabilities

Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. Ivanti Secure Access Client suffers from a privilege issue vulnerability that can be exploited by an...

1000 Projects Bookstore Management System SQL Injection Vulnerability

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from a parameter id in the file processusersdel.php that can lead to SQL injection...

PT-2025-6258

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 7.4.0 through 7.4.2 and prior to 7.2.5 Fortinet FortiAnalyzer versions 7.4.0 through 7.4.2 and prior to 7.2.5 Description: The issue is related to an improper limitation of a pathname to a restricted directory,...

PT-2025-6105 · Code Projects · Code-Projects Police Fir Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Police FIR Record Management System version 1.0 Description: A critical vulnerability was found in the Delete Record Handler component of the code-projects Police FIR Record Management System. The manipulation of this...

LoLLMS check_access() Privilege Escalation

The vulnerability of the checkaccess function in the system for launching and managing large language multimodal systems LoLLMS is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data, or to cau...

PT-2025-5988 · WordPress · Wp All Import Pro

Name of the Vulnerable Software and Affected Versions: WP All Import Pro versions up to and including 4.9.7 Description: The issue is related to cross-site request forgery due to missing nonce validation in the delete and edit function. This allows unauthenticated attackers to delete imported...

CmsEasy path traversal vulnerability

CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy company. A path traversal vulnerability exists in CmsEasy version 7.7.7.9, which stems from the library lib/admin/databaseadmin.php where the function deletediraction/restoreaction can lead to a path...

SUSE CVE-2023-52925

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't fail inserts if duplicate has expired nftables selftests fail: run-tests.sh testcases/sets/0044intervaloverlap0 Expected: 0-2 . 0-3, got: W: FAILED ./testcases/sets/0044intervaloverlap0: got 1 Insertion...

CVE-2021-26619

An path traversal vulnerability leading to delete arbitrary files was discovered in BigFileAgent. Remote attackers can use this vulnerability to delete arbitrary files of unspecified number of users...

CVE-2022-3898

The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.9. This is due to missing or incorrect nonce validation on various functions including the affiliatesmenu method. This makes it possible for unauthenticated attackers t...

PT-2025-5882 · Codeastro · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue concerns incorrect access control in the endpoint "/admin/m delete.php" that allows unauthorized attackers to delete complaints arbitrarily by modifying the id parameter...

CVE-2020-36084

SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/deleteteacherstudents.php?id= parameter via id field...