Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/10/28 9:1 p.m.1 views

CVE-2025-12314

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS5AI score0.00028EPSS
Exploits1References1
OSV
OSV
added 2025/10/27 8:15 p.m.0 views

CVE-2025-12314

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

9.8CVSS5.7AI score
Exploits0References5
Cvelist
Cvelist
added 2025/10/27 8:2 p.m.6 views

CVE-2025-12314 code-projects Food Ordering System deleteitem.php sql injection

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS0.00028EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 8:2 p.m.4 views

CVE-2025-12314

CVE-2025-12314 affects code-projects Food Ordering System 1.0. The vulnerability is triggered by manipulating the itemID argument in the unknown function of /admin/deleteitem.php, enabling SQL injection. This allows remote exploitation, and the public exploit has been released, indicating real-wo...

9.8CVSS5AI score0.00028EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 8:2 p.m.2 views

CVE-2025-12314 code-projects Food Ordering System deleteitem.php sql injection

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS5AI score0.00028EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/27 8:2 p.m.3 views

EUVD-2025-36344

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

5.8CVSS4.8AI score0.00028EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

Food Ordering System SQL注入漏洞

Food Ordering System is a food ordering system by Siddhesh Personal Developer. A SQL injection vulnerability exists in Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter itemID in the file /admin/deleteitem.php, which could lead to a SQL injection attack...

9.8CVSS5.6AI score0.00028EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.3 views

PT-2025-44032

Name of the Vulnerable Software and Affected Versions code-projects Food Ordering System version 1.0 Description A flaw exists in code-projects Food Ordering System 1.0 where manipulation of the itemID argument in an unknown function within the '/admin/deleteitem.php' file can lead to SQL...

9.8CVSS5.2AI score0.00028EPSS
Exploits1References7
OSV
OSV
added 2019/01/24 4:29 a.m.1 views

CVE-2018-17641

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.00641EPSS
Exploits0References2
CNVD
CNVD
added 2018/10/17 12:0 a.m.1 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25198)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the deleteItem method of TimeField in Foxit Reader 9.2.0.9297 and...

8.8CVSS8.7AI score0.00641EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.24 views

Foxit Reader XFA TimeField deleteItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.7AI score0.00641EPSS
Exploits0References1
OSV
OSV
added 2018/06/19 6:29 p.m.1 views

CVE-2018-12583

An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php...

6.5CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2018/06/19 6:0 p.m.32 views

CVE-2018-12583

AKCMS 6.1 is affected by a cross-site request forgery (CSRF) that can delete articles via the admincp deleteitem action to index.php. The vulnerability is described in CVE-2018-12583 and corroborated by CNVD-2018-14261 and related records, which state an attacker could exploit CSRF to delete arti...

6.5CVSS6.4AI score0.00117EPSS
Exploits1References2Affected Software1
0day.today
0day.today
added 2013/10/04 12:0 a.m.38 views

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution Vulnerability

This Metasploit module exploits the SEListCtrlX ActiveX installed with the SIEMENS Solid Edge product. The vulnerability exists on several APIs provided by the control, where user supplied input is handled as a memory pointer without proper validation, allowing an attacker to read and corrupt...

7.6AI score
Exploits0
Packet Storm
Packet Storm
added 2013/10/02 12:0 a.m.23 views

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

0.5AI score
Exploits0
Rows per page
Query Builder