Lucene search
+L

99 matches found

OSV
OSV
added 2025/10/27 10:15 a.m.4 views

CVE-2025-12256

A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /editcontestant.php. Executing manipulation of the argument contestantid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

8.8CVSS5.8AI score0.00405EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/27 9:32 a.m.12 views

CVE-2025-12256 code-projects Online Event Judging System edit_contestant.php sql injection

A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /editcontestant.php. Executing manipulation of the argument contestantid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

6.5CVSS0.00405EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 9:32 a.m.14 views

CVE-2025-12256

CVE-2025-12256 affects code-projects Online Event Judging System 1.0, with a SQL injection in /edit_contestant.php via the contestant_id parameter. A remote attacker can exploit this, and public exploits exist. Root cause is lack of validation of externally provided SQL statements in that paramet...

8.8CVSS6.5AI score0.00405EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/10/27 9:32 a.m.7 views

EUVD-2025-36142

A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /editcontestant.php. Executing manipulation of the argument contestantid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

6.5CVSS6.7AI score0.00405EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/27 9:15 a.m.9 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS5.8AI score0.00306EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/27 9:15 a.m.6 views

CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...

8.8CVSS5.7AI score0.00306EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 a.m.13 views

CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

8.8CVSS0.00306EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/27 9:15 a.m.6 views

CVE-2025-12252

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

8.8CVSS5.7AI score0.00306EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/27 9:15 a.m.8 views

CVE-2025-12252

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

8.8CVSS0.00306EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 9:2 a.m.12 views

CVE-2025-12255

CVE-2025-12255 affects code-projects Online Event Judging System 1.0. A SQL injection flaw originates from the lack of validation of the fullname parameter in /add_contestant.php. The vulnerability allows remote execution of arbitrary SQL commands and may lead to data theft or modification; an ex...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/10/27 9:2 a.m.8 views

EUVD-2025-36137

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /addjudge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

6.5CVSS6.6AI score0.00306EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/27 8:32 a.m.8 views

EUVD-2025-36131

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS6.5AI score0.00306EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/10/27 8:32 a.m.3 views

CVE-2025-12252 code-projects Online Event Judging System action.php sql injection

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/27 8:32 a.m.13 views

CVE-2025-12252 code-projects Online Event Judging System action.php sql injection

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00306EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/27 8:32 a.m.15 views

CVE-2025-12252

Summary: Multiple sources confirm a SQL injection in Code-Projects Online Event Judging System 1.0, arising from /ajax/action.php via manipulation of the content parameter. This is an externally exploitable, remote flaw with public exploit presence. Concrete details across CNVD-2025-26165, RH-CVE...

8.8CVSS6.7AI score0.00306EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.7 views

Code-Projects Online Event Judging System SQL注入漏洞

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter judgeid in the file /editjudge.php. An attacker can exploit this...

8.8CVSS8.2AI score0.00308EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.9 views

Code-Projects Online Event Judging System SQL注入漏洞

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addjudge.php. The vulnerability can be...

8.8CVSS8.2AI score0.00306EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.8 views

PT-2025-43910

Name of the Vulnerable Software and Affected Versions Code-Projects Online Event Judging System version 1.0 Description A SQL injection issue exists in Code-Projects Online Event Judging System 1.0. The issue is located in the /ajax/action.php file, specifically through manipulation of the conten...

8.8CVSS7.3AI score0.00306EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.8 views

PT-2025-43914

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0 Description A security flaw exists in code-projects Online Event Judging System 1.0. Manipulation of the fullname argument in the /add contestant.php file can lead to SQL injection. Remote...

8.8CVSS7.1AI score0.00306EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.5 views

Code-Projects Online Event Judging System SQL注入漏洞

Online Event Judging System is an online event judging system. Online Event Judging System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /addcontestant.php. An attacker can exploi...

8.8CVSS8.2AI score0.00306EPSS
SaveExploits1References5
Rows per page
Query Builder