Lucene search
K

986 matches found

EUVD
EUVD
added 2025/12/13 12:30 a.m.4 views

EUVD-2025-203179

A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be...

7.5CVSS6.2AI score0.00421EPSS
Exploits1References6
NVD
NVD
added 2025/12/12 10:15 p.m.4 views

CVE-2025-14583

A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be...

9.8CVSS0.00421EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/12 9:31 p.m.4 views

EUVD-2025-203122

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

7.5CVSS6.4AI score0.00393EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.5 views

PT-2025-50963

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System version 1.0, specifically within the file /view admin.php. Manipulation of the admin id argument can lea...

9.8CVSS7.4AI score0.00393EPSS
Exploits1References7
CVE
CVE
added 2025/12/09 6:32 p.m.10 views

CVE-2025-14334

A vulnerability (CVE-2025-14334) affects itsourcecode Student Management System version 1.0. The issue is in the file /new_adviser.php (also reported as /new adviser.php in some sources), where manipulating the Name parameter can trigger a SQL injection. The attack can be performed remotely, and ...

9.8CVSS7AI score0.00333EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/09 7:37 a.m.5 views

CVE-2025-14222

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /printpersonnelreport.php. This manipulation of the argument perid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

8.8CVSS6.8AI score0.0026EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.5 views

PT-2025-50209

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0, specifically within the file /new adviser.php. Manipulation of the Name argument in an unknown function can lead to SQL...

7.5CVSS7.5AI score0.00333EPSS
Exploits1References7
NVD
NVD
added 2025/12/08 5:16 p.m.2 views

CVE-2025-14257

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newrecord.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

9.8CVSS0.00407EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/08 3:30 p.m.3 views

EUVD-2025-201716

A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing manipulation of the argument userid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publi...

6.5CVSS6.3AI score0.00277EPSS
Exploits1References6
OSV
OSV
added 2025/12/08 8:15 a.m.5 views

CVE-2025-14222

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /printpersonnelreport.php. This manipulation of the argument perid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

8.8CVSS5.8AI score
Exploits0References5
EUVD
EUVD
added 2025/12/08 7:32 a.m.3 views

EUVD-2025-201693

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /printpersonnelreport.php. This manipulation of the argument perid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.0026EPSS
Exploits1References7
EUVD
EUVD
added 2025/12/08 3:2 a.m.3 views

EUVD-2025-201657

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /membersearch.php. Executing manipulation of the argument rollnumber can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.5AI score0.00326EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.5 views

PT-2025-49512

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print personnel report.php. This manipulation of the argument per id causes sql injection. The attack may be initiated remotely. The exploit has been published and may be us...

6.5CVSS6.9AI score0.0026EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/07 9:32 p.m.18 views

CVE-2025-14203 code-projects Question Paper Generator selectquestionuser.php sql injection

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

6.5CVSS0.00301EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/07 6:31 p.m.3 views

EUVD-2025-201608

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

6.5CVSS5.8AI score0.00309EPSS
Exploits1References5
OSV
OSV
added 2025/12/07 5:15 p.m.2 views

CVE-2025-14199

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

9.8CVSS5.3AI score0.00309EPSS
Exploits1References4
NVD
NVD
added 2025/12/07 5:15 p.m.4 views

CVE-2025-14199

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

9.8CVSS0.00309EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/07 5:2 p.m.20 views

CVE-2025-14199 Verysync 微力同步 Web Administration text.txt unrestricted upload

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

6.5CVSS0.00309EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/07 12:0 a.m.2 views

PT-2025-49412

Name of the Vulnerable Software and Affected Versions Verysync versions up to 2.21.3 Description A flaw exists in Verysync that allows for unrestricted file upload. This impacts an unknown function within the Web Administration Module, specifically related to the file...

9.8CVSS6.1AI score0.00309EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/12/07 12:0 a.m.1 views

PT-2025-49417

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

6.5CVSS6.9AI score0.00301EPSS
Exploits1References6
Rows per page
Query Builder