Lucene search
+L

1036 matches found

RedhatCVE
RedhatCVE
added 2025/08/17 9:24 a.m.13 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS7.6AI score0.00335EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/17 5:11 a.m.20 views

CVE-2025-9011

A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the argument emailid leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7.6AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 7:23 p.m.16 views

CVE-2025-8923

A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

9.8CVSS7.8AI score0.0044EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/15 7:23 p.m.15 views

CVE-2025-8922

A vulnerability was found in code-projects Job Diary 1.0. This affects an unknown part of the file /admin-inbox.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

9.8CVSS7.7AI score0.0044EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/15 9:15 a.m.13 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/15 5:2 a.m.26 views

CVE-2025-9011 PHPGurukul Online Shopping Portal Project signup.php sql injection

A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the argument emailid leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00403EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.10 views

PT-2025-33470 · Unknown · Simple Cafe Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...

8.8CVSS6.6AI score0.00335EPSS
SaveExploits1References9
NVD
NVD
added 2025/08/14 5:15 p.m.13 views

CVE-2025-8969

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/approveuser.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

9.8CVSS0.00421EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/08/14 4:54 p.m.5 views

CVE-2025-55167

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/funcionario/dependenteremover.php endpoint, specifically in the iddependente parameter. This vulnerability...

9.8CVSS8.7AI score0.00524EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/14 12:15 p.m.8 views

CVE-2025-8960

A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/saveairlines.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/08/14 11:32 a.m.2 views

CVE-2025-8960 Campcodes Online Flight Booking Management System save_airlines.php sql injection

A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/saveairlines.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7.6AI score0.00503EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.6 views

itsourcecode Online Tour and Travel Management System 注入漏洞

itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system. An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which originates from a SQL injection due to incorrect...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.9 views

PT-2025-33351 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The vulnerability is located in the /admin/operations/booking.ph...

7.5CVSS7.5AI score0.00421EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
added 2025/08/13 6:32 p.m.4 views

CVE-2025-8923 code-projects Job Diary edit-details.php sql injection

A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS7.8AI score0.0044EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/13 6:32 p.m.16 views

CVE-2025-8923 code-projects Job Diary edit-details.php sql injection

A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS0.0044EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/13 6:32 p.m.24 views

CVE-2025-8922

The CVE-2025-8922 entry corresponds to a SQL injection vulnerability in code-projects Job Diary 1.0, specifically in the admin-inbox.php file where the ID parameter is not validated. Published details from multiple connected sources confirm remote exploitation and public disclosure of the exploit...

9.8CVSS7.6AI score0.0044EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.8 views

PT-2025-33069 · Campcodes · Campcodes Online Water Billing System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Water Billing System version 1.0 Description: A SQL injection issue exists in Campcodes Online Water Billing System 1.0 due to improper processing of the /viewbill.php file. Manipulation of the ID argument can lead to SQL...

9.8CVSS8.3AI score0.00417EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/08/10 12:15 a.m.9 views

CVE-2025-50928

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function...

4.8CVSS8.1AI score0.00237EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2025/08/10 12:0 a.m.9 views

PT-2025-32480 · Zhilink 智互联(深圳)科技有限公司 · Adp Application Developer Platform

Name of the Vulnerable Software and Affected Versions: zhilink 智互联深圳科技有限公司 ADP Application Developer Platform version 1.0.0 Description: A critical issue exists in the zhilink 智互联深圳科技有限公司 ADP Application Developer Platform. The vulnerability is due to a SQL injection that can be triggered by...

6.5CVSS8.2AI score0.00329EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/08/09 12:23 a.m.7 views

CVE-2023-41521

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

8.8CVSS8.2AI score0.00302EPSS
SaveExploits0References1
Rows per page
Query Builder