Lucene search
+L

11545 matches found

CVE
CVE
added 2025/12/08 5:32 a.m.20 views

CVE-2025-14218

CVE-2025-14218 affects code-projects Currency Exchange System version 1.0, specifically the /editotheraccount.php file. The vulnerability arises from an injectable ID parameter in an unknown function, enabling SQL injection that can be exploited remotely. Multiple connected sources reiterate that...

9.8CVSS6.7AI score0.00379EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/12/08 5:16 a.m.9 views

CVE-2025-14215

A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS0.00379EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/08 5:16 a.m.16 views

CVE-2025-14215

A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/08 5:2 a.m.9 views

EUVD-2025-201662

A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

7.5CVSS6.5AI score0.00379EPSS
SaveExploits1References6
NVD
NVD
added 2025/12/08 4:15 a.m.8 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS0.00325EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/12/08 4:2 a.m.4 views

CVE-2025-14215 code-projects Currency Exchange System edit.php sql injection

A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS7.3AI score0.00379EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/08 4:2 a.m.17 views

CVE-2025-14215

The CVE-2025-14215 entry affects Currency Exchange System 1.0, specifically the /edit.php file where manipulating the ID parameter enables SQL injection. The vulnerability is remote and has public exploitation activity, with varied CVSS assessments (high/critical ranges) indicating potential impa...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/12/08 4:2 a.m.12 views

EUVD-2025-201664

A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

7.5CVSS6.7AI score0.00379EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/08 3:32 a.m.9 views

EUVD-2025-201665

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.4AI score0.00325EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2025/12/08 3:32 a.m.3 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.2AI score0.00325EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.8 views

code-projects Currency Exchange System SQL注入漏洞

Currency Exchange System is a currency exchange system. The Currency Exchange System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /edittrns.php. An attacker can exploit this vulnerabilit...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.9 views

Code-Projects Currency Exchange System SQL注入漏洞

Currency Exchange System is a currency exchange system. The Currency Exchange System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of file /edit.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.11 views

PT-2025-49505

Name of the Vulnerable Software and Affected Versions Currency Exchange System version 1.0 Description A SQL injection issue exists in Currency Exchange System 1.0. The issue is located in the file '/edit.php', where manipulation of the ID argument can lead to SQL injection. The attack can be...

9.8CVSS7.5AI score0.00379EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.10 views

PT-2025-49544

A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...

6.5CVSS6.6AI score0.00331EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.16 views

PT-2025-49508

Name of the Vulnerable Software and Affected Versions code-projects Currency Exchange System version 1.0 Description A security flaw exists in code-projects Currency Exchange System version 1.0. The issue involves a SQL injection that can be triggered by manipulating the ID argument in the...

9.8CVSS7.5AI score0.00379EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.17 views

PT-2025-49299

Name of the Vulnerable Software and Affected Versions Nextcloud Deck versions prior to 1.14.6 Nextcloud Deck versions prior to 1.15.2 Description Nextcloud Deck is a kanban style organization tool for personal and team project management integrated with Nextcloud. A flaw in the permission logic...

5.4CVSS6.3AI score0.00273EPSS
SaveExploits0References10
OSV
OSV
added 2025/12/04 7:16 p.m.13 views

CVE-2025-14015

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

9.8CVSS6AI score0.0079EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/04 6:32 p.m.43 views

CVE-2025-14015 H3C Magic B0 aspForm EditWlanMacList buffer overflow

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

9CVSS0.0079EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/12/04 12:30 p.m.19 views

CVE-2025-13795

A weakness has been identified in codingWithElias School Management System up to f1ac334bfd89ae9067cc14dea12ec6ff3f078c01. Affected is an unknown function of the file /student-view.php of the component Edit Student Info Page. This manipulation of the argument First Name causes cross site scriptin...

4.8CVSS5.3AI score0.0024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.14 views

PT-2025-49113

Name of the Vulnerable Software and Affected Versions H3C Magic B0 versions up to 100R002 Description A weakness exists in H3C Magic B0 up to version 100R002. The issue involves the EditWlanMacList function within the /goform/aspForm file. Manipulation of the param argument can lead to a buffer...

9.8CVSS8.6AI score0.0079EPSS
SaveExploits1References9
Rows per page
Query Builder