cve-2025-6907

CVE‑2025‑6907 SQLi エクスプロイトツール ファイル: exploit.c 作者: Byte Reaper ターゲットサービス: CODEPROJECT タイプ: SQL インジェクション 🔎 概要 これは、CODEPROJECT サービス内の CVE‑2025‑6907 脆弱性を対象とした、スタンドアロンの C 言語ベースの SQL インジェクションエクスプロイトです。 複数の高度な技術を組み合わせています: 自動ペイロード列挙（ブールベースおよび時間ベースのチェックを含む） ディレクトリ/プロセス検査のためのインラインアセンブリシステムコール メモリマッピングダンプ...

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-86224

A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 affects the mysqli_query function in /admin/modal_add_product.php , where manipulation of the fname argument allows a remote, unauthenticated attacker to inject SQL. The impact is rated HIGH (7.3) under CVSS 3.1...

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-72173

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-54974

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-67404

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

PT-2026-65921

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update student.php via parameters fname and student class...

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-67404

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

PT-2026-65918

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save stud.php via the parameters fname, lname, and student class...

CVE-2025-67407

The Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection within the update_student.php file. The vulnerability is triggered via the fname and student_class parameters. The CVSS 3.1 score is 7.3 (High) , indicating a network-accessible flaw requiring no privileges or...

CVE-2025-67407

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2026-15672

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2026-15672

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2026-15672 itsourcecode Electronic Judging System add_judges.php sql injection

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/addjudges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

PT-2026-57968

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/add judges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and...

student_management_system 跨站脚本漏洞

studentmanagementsystem is a student information management tool personally developed by Vivek Singh. studentmanagementsystem has a cross-site scripting vulnerability. This vulnerability stems from improper handling of parameters such as name, address, and fname by an unknown function in the...

CVE-2026-6033

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /updatedetailsfromstudent.php?eno=146891650. Executing a manipulation of the argument fname can lead to sql injection. The attack may be performed from remote. The exploit has been public...