CVE-2025-8252

CVE-2025-8252 concerns code-projects Exam Form Submission 1.0. Affected component is the file /admin/delete_s5.php, where manipulation of the ID parameter enables SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. The connected documents consistently des...

CVE-2025-8252 code-projects Exam Form Submission delete_s5.php sql injection

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletes5.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-8252 code-projects Exam Form Submission delete_s5.php sql injection

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletes5.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-8251

CVE-2025-8251 affects code-projects Exam Form Submission 1.0. The vulnerability lies in the /admin/delete_s4.php function where manipulating the ID parameter leads to an SQL injection. This can be exploited remotely and the exploit has been publicly disclosed. Multiple connected sources corrobora...

CVE-2025-8251 code-projects Exam Form Submission delete_s4.php sql injection

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deletes4.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

CVE-2025-8249

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/updates3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-8250

A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates4.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-8249

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/updates3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-8250

A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates4.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-8250

CVE-2025-8250 affects code-projects Exam Form Submission 1.0. The issue is located in an unknown function of the file /admin/update_s4.php and stems from manipulating the credits argument, which leads to an SQL injection. The exploit is capable of remote execution, and public disclosure of the ex...

CVE-2025-8250 code-projects Exam Form Submission update_s4.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates4.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-8249 code-projects Exam Form Submission update_s3.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/updates3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-8249

CVE-2025-8249 affects code-projects Exam Form Submission 1.0. The vulnerability is an SQL injection in the processing of the file /admin/update_s3.php caused by unsafely handling the credits parameter. The issue can be exploited remotely, and public disclosure is noted in several sources, with at...

CVE-2025-8249 code-projects Exam Form Submission update_s3.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/updates3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The explo...

PT-2025-31061 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0, affecting an unknown part of the file /admin/delete s2.php. The manipulation of the ID argument can lead to SQL...

PT-2025-31044 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A vulnerability exists in code-projects Exam Form Submission 1.0 related to unrestricted file upload. The issue affects the processing of the /register.php file. Manipulation of the...

Code-Projects Exam Form Submission 注入漏洞

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. An injection vulnerability exists in code-projects Exam Form Submission version 1.0, which originates from SQL injection due to manipulation of the parameter ID in the file /admin/deletes3.php...

Grav Cross-Site Scripting Vulnerability (CNVD-2025-30357)

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a cross-site scripting vulnerability that stems from insufficient input validation of form fields. An attacker can exploit this...

Tenda CH22 formdeleteUserName function buffer overflow vulnerability

Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the formdeleteUserName function in the /goform/deleteUserName file improperly handling the oldaccount parameter. An attacker can exploit this vulnerabilit...

Code-Projects Exam Form Submission 代码问题漏洞

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. A code issue vulnerability exists in Code-Projects Exam Form Submission version 1.0, which stems from a misbehavior of the parameter image in file/register.php resulting in arbitrary file uploads...