309 matches found
CVE-2023-3339
A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument testid leads to sql injection. The attack can be launched remotely...
CVE-2023-46022
SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter...
CVE-2022-36735
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
CVE-2025-3310
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-3310 code-projects Blood Bank Management System delete.php sql injection
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-3310: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-2984 code-projects Payroll Management System delete.php sql injection
A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has be...
CVE-2025-2984: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has be...
CVE-2025-25876: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data...
CVE-2025-25876
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data...
CVE-2025-25876
A vulnerability exists in ITSourcecode Simple ChatBox version 1.0 and earlier versions, specifically within the unknown code of the /delete.php file. This flaw allows an attacker to perform an SQL injection to obtain sensitive data . As of the current reports, no patched version has been released...
CVE-2024-9812
A vulnerability classified as critical was found in code-projects Crud Operation System 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2024-55509
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...
CVE-2024-55509: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...
CVE-2024-55506: Authorization Bypass Through User-Controlled Key
An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...
CVE-2024-10601 Tongda OA 2017 delete.php sql injection
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the argument whererepeat leads to sql injection. The attack can be...
CVE-2024-10601: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the argument whererepeat leads to sql injection. The attack can be...
CVE-2024-10448 code-projects Blood Bank Management System delete.php cross-site request forgery
A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be...
CVE-2024-10448: Cross-Site Request Forgery (CSRF)
A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be...
CVE-2024-10417 code-projects Blood Bank Management System delete.php sql injection
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /file/delete.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has...