Lucene search
+L

11809 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•3 views

CVE-2025-11088: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available ...

8.8CVSS5.6AI score0.00349EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•2 views

CVE-2025-11090: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might...

8.8CVSS5.7AI score0.00336EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•3 views

CVE-2025-11054: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS5.6AI score0.00381EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•4 views

CVE-2025-11041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

8.8CVSS5.5AI score0.00335EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•3 views

CVE-2025-11040: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/modusers/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/24 1:33 p.m.•22 views

CVE-2025-10800

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/09/22 7:02 p.m.•6 views

CVE-2025-10811 code-projects Hostel Management System index.php sql injection

A flaw has been found in code-projects Hostel Management System 1.0. This affects an unknown function of the file /justines/admin/modcomments/index.php?view=view. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS6.4AI score0.00683EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/22 1:32 p.m.•24 views

CVE-2025-10800 itsourcecode Online Discussion Forum index.php sql injection

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

7.5CVSS0.00478EPSS
SaveExploits1References7
CVE
CVE
•added 2025/09/22 9:02 a.m.•36 views

CVE-2025-10791

CVE-2025-10791 affects code-projects Online Bidding System 1.0. The vulnerability is a SQL injection in the file /administrator/index.php, caused by manipulation of the aduser parameter. It is described as exploitable remotely and the exploit has been publicly available. Multiple connected source...

9.8CVSS7.2AI score0.00589EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10791: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/index.php. This manipulation of the argument aduser causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available t...

9.8CVSS5.6AI score0.00589EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10811: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Hostel Management System 1.0. This affects an unknown function of the file /justines/admin/modcomments/index.php?view=view. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

9.8CVSS5.5AI score0.00683EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•3 views

CVE-2025-10813: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/modreports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public...

9.8CVSS5.5AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10798: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/modroomtype/index.php?view=view. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10799: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Hostel Management System 1.0. The affected element is an unknown function of the file /justines/admin/modreservation/index.php?view=view. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10797: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /justines/index.php. This manipulation of the argument logemail causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•0 views

CVE-2025-10812: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/modamenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS5.5AI score0.00478EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/09/22 12:00 a.m.•20 views

CVE-2025-55885

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

0.00357EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-55885: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

6.3CVSS6AI score0.00357EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•0 views

CVE-2025-10800: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•11 views

itsourcecode Online Discussion Forum SQL注入漏洞

itsourcecode Online Discussion Forum is an online forum of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which stems from incorrect manipulation of the parameters email/password in the file /index.php, which could lead to a SQL...

9.8CVSS7.7AI score0.00478EPSS
SaveExploits1References7
Rows per page
Query Builder