Lucene search
+L

237 matches found

CNVD
CNVD
•added 2025/10/13 12:00 a.m.•11 views

Online Shopping Portal Project login.php File SQL Injection Vulnerability

Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /shopping/login.php. An attacker...

6.5CVSS8.3AI score0.00258EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/11 10:05 p.m.•19 views

CVE-2025-11588

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

8.8CVSS7AI score0.00335EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/11 12:30 a.m.•15 views

EUVD-2025-33783

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.00335EPSS
SaveExploits1References6
OSV
OSV
•added 2025/10/10 10:15 p.m.•12 views

CVE-2025-11588

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/10 9:32 p.m.•25 views

CVE-2025-11588

CodeAstro Gym Management System 1.0 contains a SQL injection in /customer/index.php caused by manipulating the fullname argument. The issue is exploitable remotely, with publicly available exploit material. Multiple connected sources consistently report the same root cause and impact, with CVEs a...

8.8CVSS6.4AI score0.00335EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/10 9:32 p.m.•12 views

CVE-2025-11588 CodeAstro Gym Management System index.php sql injection

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

6.5CVSS6.7AI score0.00335EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/10 9:27 p.m.•9 views

CVE-2025-11557

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

9.8CVSS7.1AI score0.00435EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•16 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /customer/index.php, which could lead to a SQL injection...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/09 9:31 p.m.•10 views

EUVD-2025-33555

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

7.5CVSS6.7AI score0.00435EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/09 9:15 p.m.•9 views

CVE-2025-11557

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

9.8CVSS0.00435EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/09 9:02 p.m.•6 views

CVE-2025-11557 projectworlds Gate Pass Management System add-pass.php sql injection

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/09 9:02 p.m.•25 views

CVE-2025-11557 projectworlds Gate Pass Management System add-pass.php sql injection

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

7.5CVSS0.00435EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•12 views

Projectworlds Gate Pass Management System SQL注入漏洞

Projectworlds Gate Pass Management System is a gate management system for Projectworlds. A SQL injection vulnerability exists in Projectworlds Gate Pass Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /add-pass.php, which could lead ...

9.8CVSS7.8AI score0.00435EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/08 5:15 p.m.•8 views

CVE-2025-11481

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donateblood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be...

9.8CVSS5.7AI score0.00398EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/08 4:32 p.m.•16 views

CVE-2025-11481 varunsardana004 Blood-Bank-And-Donation-Management-System donate_blood.php sql injection

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donateblood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be...

6.5CVSS6.2AI score0.00398EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/08 4:32 p.m.•10 views

EUVD-2025-33299

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donateblood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be...

6.5CVSS6.1AI score0.00398EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/08 4:32 p.m.•32 views

CVE-2025-11481

CVE-2025-11481 affects the Blood-Bank-And-Donation-Management-System (varunsardana004) with the flaw in /donate_blood.php where manipulating the fullname parameter leads to SQL injection. The Red Hat/NVD entries describe remote exploitation and indicate the exploit has been published; the product...

9.8CVSS6.2AI score0.00398EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•12 views

PT-2025-41288

Name of the Vulnerable Software and Affected Versions varunsardana004 Blood-Bank-And-Donation-Management-System versions prior to dc9e0393d826fbc85fad9755b5bc12cba1919df2 Description A flaw exists in the Blood-Bank-And-Donation-Management-System that allows for sql injection. The issue is located...

9.8CVSS6.3AI score0.00398EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•12 views

Blood-Bank-&-Donation-Management-System 安全漏洞

Blood-Bank-&-Donation-Management-System is a blood bank and blood donation management system by Varun Sardana, an individual developer. A security vulnerability exists in Blood-Bank-&-Donation-Management-System, which stems from incorrect manipulation of the parameter fullname in the file...

9.8CVSS6.9AI score0.00398EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2013-4730

Malware in sbrugna...

6.8CVSS6.1AI score0.07217EPSS
SaveExploits3References10
Rows per page
Query Builder