25454 matches found
itsourcecode Online Voting System SQL注入漏洞
Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter id/category in the file /index.php. An attacker can exploit this vulnerability to...
CodeAstro Simple Inventory System SQL注入漏洞
CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...
PT-2025-47138
Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...
g33kyrash Online Banking System SQL注入漏洞
g33kyrash Online Banking System is an online banking system developed using PHP and MySQL by the individual developer of g33kyrash. A SQL injection vulnerability exists in g33kyrash Online Banking System, which stems from an incorrect manipulation of the parameter Username in the file /index.php,...
Malicious code in perfviewer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ea912a2de677fa6d9ea6dbf9a792dace4d927efd46a5cb615ba8548fec4930e8 During installation, code downloads and starts an executable and a DLL library. After starting them, files are removed from the disk. The executable has been...
EUVD-2025-197722
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
CVE-2025-13241
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
CVE-2025-13241
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
CVE-2025-13241 code-projects Student Information System index.php sql injection
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
EUVD-2025-197713
A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...
CVE-2025-13234
A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...
CVE-2025-13233
A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...
CVE-2025-13234
The CVE-2025-13234 affects itsourcecode Inventory Management System 1.0, with a SQL injection flaw in the PROID parameter of /index.php?q=product. Multiple sources confirm remote exploitation and a publicly released exploit. Remediation is not detailed in the initial document beyond recommending ...
CVE-2025-13233 itsourcecode Inventory Management System index.php sql injection
A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...
CVE-2025-13233
CVE-2025-13233 affects itsourcecode Inventory Management System 1.0. The vulnerable element is the file /index.php?q=single-item where manipulation of the ID parameter enables SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Available details indicat...
net: mctp: Don't access ifa_index when missing
...
itsourcecode Inventory Management System SQL注入漏洞
itsourcecode Inventory Management System is an inventory management system of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Inventory Management System version 1.0, which originates from a misuse of the parameter ID in file /index.php?q=single-item, which may lead...
Code-Projects Student Information System SQL注入漏洞
Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from a lack of security filtering of the Username parameter in the /index.php file. No details of the vulnerability are available at this time...
Malicious code in hexadecpy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e553647ff67ec6e0339b5de8038f9522494a1200e0437156eee7674d5a29ef21 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2025-191791 Malicious code in minemeld-core (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...