Lucene search
K

22 matches found

CNNVD
CNNVD
added 2026/03/31 12:0 a.m.4 views

Code-Projects Student Membership System SQL注入漏洞

The Code-Projects Student Membership System is an open-source student management system developed by Code-Projects. Version 1.0 of the Code-Projects Student Membership System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the file...

6.5CVSS6.6AI score0.00036EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/28 12:31 a.m.1 views

EUVD-2025-36369

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS4.9AI score0.0005EPSS
Exploits1References7
NVD
NVD
added 2025/10/28 12:15 a.m.4 views

CVE-2025-12332

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS0.0005EPSS
Exploits1References6
OSV
OSV
added 2025/10/28 12:15 a.m.1 views

CVE-2025-12332

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS4AI score
Exploits0References6
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.1 views

SourceCodester Student Grades Management System 代码注入漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A code injection vulnerability exists in SourceCodester Student Grades Management System version 1.0, which originates from a cross-site scripting vulnerability in the deleteuser...

4.8CVSS4.4AI score0.0005EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/10/27 11:22 p.m.2 views

CVE-2025-12332 SourceCodester Student Grades Management System admin.php delete_user cross site scripting

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS5.1AI score0.0005EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/10/27 11:22 p.m.8 views

CVE-2025-12332 SourceCodester Student Grades Management System admin.php delete_user cross site scripting

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function deleteuser of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

4.8CVSS0.0005EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-49731

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.0026EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-30403

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00057EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/09/24 6:34 a.m.3 views

CVE-2025-10786

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

9.8CVSS7AI score0.00057EPSS
Exploits1References1
OSV
OSV
added 2025/09/22 7:15 a.m.1 views

CVE-2025-10786

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

9.8CVSS5.8AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/09/17 11:32 p.m.2 views

CVE-2025-10627 SourceCodester Online Exam Form Submission delete_user.php sql injection

A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/deleteuser.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may ...

6.5CVSS6.3AI score0.00058EPSS
Exploits1References5
CVE
CVE
added 2025/09/17 2:32 p.m.11 views

CVE-2025-10595

SourceCodester Online Student File Management System 1.0 contains a SQL injection in /admin/delete_user.php triggered by manipulating the user_id parameter. The issue can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate the vulnerability in the delet...

8.8CVSS6.5AI score0.00058EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/07/31 3:15 a.m.3 views

CVE-2025-8345

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function deleteuser of the file crm/WeiXinApp/yunzhijia/yunzhijiaApi.php. The manipulation of the argument function leads to sql injection...

9.8CVSS5.6AI score0.00209EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/31 2:2 a.m.2 views

CVE-2025-8345 Shanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user sql injection

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function deleteuser of the file crm/WeiXinApp/yunzhijia/yunzhijiaApi.php. The manipulation of the argument function leads to sql injection...

6.5CVSS6.8AI score0.00209EPSS
Exploits0References4
CVE
CVE
added 2025/07/31 2:2 a.m.13 views

CVE-2025-8345

CVE-2025-8345 affects Lingdang CRM up to version 8.6.4.7. The vulnerability is in the function delete_user of crm/WeiXinApp/yunzhijia/yunzhijiaApi.php, where manipulation of the function argument leads to SQL injection. The issue can be exploited remotely and exploit publicly disclosed. Remedies ...

9.8CVSS7.7AI score0.00209EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 1:6 a.m.3 views

CVE-2022-46952

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuser...

7.2CVSS8.3AI score0.0026EPSS
Exploits1
OSV
OSV
added 2024/05/14 3:44 p.m.0 views

CVE-2024-4807

A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file deleteuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has be...

8.8CVSS6.4AI score0.00221EPSS
Exploits1References4
OSV
OSV
added 2023/01/13 8:15 p.m.1 views

CVE-2022-46952

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuser...

7.2CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2023/01/13 12:0 a.m.53 views

CVE-2022-46952

Dynamic Transaction Queuing System v1.0 is affected by a SQL injection vulnerability in the id parameter of /admin/ajax.php?action=delete_user. The CVE-2022-46952 entry documents an in-app SQLi risk with high impact (C/H I/H A/H) and network-based access with no user interaction required; privile...

7.2CVSS7.2AI score0.0026EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder