Lucene search
+L

397 matches found

OSV
OSV
added 2025/08/13 6:15 p.m.9 views

CVE-2025-8921

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

9.8CVSS5.7AI score0.0044EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/13 6:15 p.m.17 views

CVE-2025-8921

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

9.8CVSS0.0044EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/13 6:02 p.m.35 views

CVE-2025-8921

Code-Projects Job Diary 1.0 is affected by a SQL injection in /user-apply.php via the job_title parameter. Several connected documents confirm remote exploitation and public disclosure of the exploit. The exact vulnerable functionality is unknown beyond that the issue arises in /user-apply.php. R...

9.8CVSS7.6AI score0.0044EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/13 6:02 p.m.23 views

CVE-2025-8921 code-projects Job Diary user-apply.php sql injection

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

7.5CVSS0.0044EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/13 6:02 p.m.6 views

CVE-2025-8921 code-projects Job Diary user-apply.php sql injection

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

7.5CVSS7.6AI score0.0044EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.18 views

PT-2025-33064 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A SQL injection issue exists in code-projects Job Diary 1.0. The vulnerability affects an unknown functionality within the /user-apply.php file. Manipulation of the job title argument can lead ...

9.8CVSS7.4AI score0.0044EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/08/13 12:00 a.m.10 views

Code-Projects Job Diary 注入漏洞

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /edit-details.php. An attacker can exploit this vulnerability to execute illegal SQL commands to stea...

9.8CVSS8.2AI score0.0044EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.17 views

PT-2025-33065 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A SQL injection issue exists due to the manipulation of the ID argument in the /admin-inbox.php file. This allows for remote exploitation. The exploit has been publicly disclosed...

9.8CVSS8.4AI score0.0044EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/08/13 12:00 a.m.9 views

Code-Projects Job Diary 注入漏洞

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter jobtitle in the file /user-apply.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

9.8CVSS8.2AI score0.0044EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/07/30 12:59 a.m.13 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS7.4AI score0.00432EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/30 12:00 a.m.18 views

e-Diary Management System Session Hijacking Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

7.5CVSS6.9AI score0.00432EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/28 6:15 p.m.12 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS0.00432EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/28 6:15 p.m.9 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00432EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/07/28 12:00 a.m.24 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

0.00432EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/28 12:00 a.m.33 views

CVE-2025-50492

CVE-2025-50492 affects PHPGurukul e-Diary Management System v1, specifically the /edms/change-password.php component. The root cause is improper session invalidation, which can enable a session hijacking attack. Impact is exploitation of user sessions with high availability impact (per CVSS). Rem...

7.5CVSS6.7AI score0.00432EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.13 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00432EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.5 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00432EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/28 12:00 a.m.12 views

PT-2025-31136 · Phpgurukul · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1 Description: The application suffers from improper session invalidation in the /edms/change-password.php component, which could allow attackers to execute a session hijacking attack...

7.5CVSS6.8AI score0.00432EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.11 views

PHPGurukul e-Diary Management System 安全漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

7.5CVSS6.8AI score0.00432EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/07/21 12:00 a.m.10 views

Job Diary view-all.php File SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-all.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

9.8CVSS8.3AI score0.00412EPSS
SaveExploits1References1
Rows per page
Query Builder