Lucene search
+L

11616 matches found

RedhatCVE
RedhatCVE
added 2025/10/09 3:13 a.m.11 views

CVE-2025-11425

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /editadmin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly...

4.8CVSS5.7AI score0.00241EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/09 1:13 a.m.9 views

CVE-2025-11421

A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible. The exploit has be...

5.4CVSS5.4AI score0.00286EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/09 1:12 a.m.14 views

CVE-2025-11420

A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/editorderdetails.php. The manipulation of the argument orderid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

9.8CVSS7AI score0.00384EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/09 12:14 a.m.12 views

CVE-2025-60311

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page...

8.8CVSS8AI score0.00416EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/08 8:19 p.m.18 views

CVE-2025-52021

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

9.8CVSS7.9AI score0.00309EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/08 8:15 p.m.7 views

CVE-2025-60311

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page...

8.8CVSS5.9AI score0.00416EPSS
SaveExploits1References3
NVD
NVD
added 2025/10/08 8:15 p.m.11 views

CVE-2025-60311

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page...

8.8CVSS0.00416EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/08 3:32 p.m.11 views

EUVD-2025-33175

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbooking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS6.5AI score0.00367EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/08 1:15 p.m.9 views

CVE-2025-11474

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbooking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS6.5AI score0.00367EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 1:15 p.m.10 views

CVE-2025-11474

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbooking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS0.00367EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/08 12:32 p.m.24 views

CVE-2025-11474 SourceCodester Hotel and Lodge Management System edit_booking.php sql injection

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbooking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS0.00367EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 12:32 p.m.4 views

CVE-2025-11474 SourceCodester Hotel and Lodge Management System edit_booking.php sql injection

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbooking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS6.7AI score0.00367EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 12:32 p.m.18 views

CVE-2025-11474

CVE-2025-11474 affects SourceCodester Hotel and Lodge Management System 1.0. The vulnerability lies in the /edit_booking.php functionality, where manipulation of the Name parameter enables a SQL injection. This is a remotely exploitable flaw with publicly available exploit details. Multiple sourc...

9.8CVSS6.3AI score0.00367EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/10/08 12:15 p.m.8 views

CVE-2025-11471

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 12:15 p.m.9 views

CVE-2025-11471

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS0.00441EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/08 12:15 p.m.7 views

CVE-2025-11472

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 12:15 p.m.6 views

CVE-2025-11472

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS0.00441EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 12:15 p.m.11 views

CVE-2025-11473

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /editcurr.php. Such manipulation of the argument currsymbol leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

9.8CVSS0.00441EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 12:02 p.m.8 views

CVE-2025-11473 SourceCodester Hotel and Lodge Management System edit_curr.php sql injection

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /editcurr.php. Such manipulation of the argument currsymbol leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

7.5CVSS6.8AI score0.00441EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/08 12:02 p.m.21 views

CVE-2025-11472 SourceCodester Hotel and Lodge Management System edit_room.php sql injection

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /editroom.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

7.5CVSS0.00441EPSS
SaveExploits1References5
Rows per page
Query Builder