CVE-2025-10417

A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deleteproduct. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-59376

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word i.e., "version" is not a write or delete operation...

SourceCodester Online Student File Management 安全漏洞

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A security vulnerability exists in SourceCodester Online Student File Management version 1.0, which stems from an incorrect manipulation of the parameter userid in the file...

SourceCodester Online Exam Form Submission SQL注入漏洞

SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A SQL injection vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/deletes1.php,...

PT-2025-38228

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection vulnerability exists due to manipulation of the ID argument in the /admin/delete s1.php file. This vulnerability can be exploited remotely. The exploit has be...

SourceCodester Online Student File Management 安全漏洞

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A security vulnerability exists in SourceCodester Online Student File Management version 1.0, which originates from an incorrect manipulation of the parameter studentid in the file...

PT-2025-38154

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A SQL injection flaw exists in the /admin/delete student.php file due to manipulation of the stud id argument. This issue is remotely exploitable. The exploit has...

PT-2025-38289

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists in SourceCodester Online Exam Form Submission 1.0. Manipulation of the ID argument in the /admin/delete user.php API endpoint can lead to SQL...

PT-2025-38159

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A vulnerability exists in SourceCodester Online Student File Management System 1.0 related to SQL injection. The issue is located in the /admin/delete user.php file...

CVE-2025-10416

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletesupplier. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly...

CVE-2025-10413

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10564

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deletecategory. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10565

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

CVE-2025-10564

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deletecategory. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10565

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

CVE-2025-10565 Campcodes Grocery Sales and Inventory System ajax.php sql injection

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

CVE-2025-10565

CVE-2025-10565 affects Campcodes Grocery Sales and Inventory System 1.0. A SQL injection exists in the /ajax.php?action=delete_receiving endpoint, triggered by manipulating the ID parameter. Several connected sources confirm remote exploitation possibilities and public disclosure of the exploit. ...

CVE-2025-10565 Campcodes Grocery Sales and Inventory System ajax.php sql injection

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

CVE-2025-10564

CVE-2025-10564 affects Campcodes Grocery Sales and Inventory System 1.0. The vulnerability is a SQL injection in the unknown function of /ajax.php?action=delete_category, triggered by manipulating the ID parameter. It is exploitable remotely, and the exploit has been made public. Some connected s...

CVE-2025-10564 Campcodes Grocery Sales and Inventory System ajax.php sql injection

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deletecategory. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...