Lucene search
+L

591 matches found

OSV
OSV
•added 2025/11/24 3:16 a.m.•14 views

CVE-2025-13580

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

8.8CVSS6.5AI score0.00306EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/24 3:02 a.m.•12 views

EUVD-2025-198598

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

6.5CVSS6.5AI score0.00306EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/24 3:02 a.m.•10 views

CVE-2025-13580 code-projects Library System mail.php sql injection

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

6.5CVSS6.4AI score0.00306EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/24 3:02 a.m.•26 views

CVE-2025-13580 code-projects Library System mail.php sql injection

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

6.5CVSS0.00306EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/24 3:02 a.m.•30 views

CVE-2025-13580

The CVE-2025-13580 entry relates to Library System 1.0 (code-projects). Multiple connected sources confirm SQL injection in the /mail.php file caused by unsafely handling the ID parameter, enabling remote exploitation. Descriptions consistently attribute the vulnerability to lack of input validat...

8.8CVSS6.4AI score0.00306EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/24 2:32 a.m.•28 views

CVE-2025-13579 code-projects Library System return.php sql injection

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00306EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/24 2:32 a.m.•27 views

CVE-2025-13579

CVE-2025-13579 affects code-projects Library System 1.0, specifically the file /return.php. Multiple connected records confirm a SQL Injection vulnerability originating from the ID parameter, enabling remote exploitation. The vulnerability is widely documented across CVE feeds (NVD/NVD mirror, RH...

8.8CVSS6.4AI score0.00306EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/11/24 2:32 a.m.•20 views

EUVD-2025-198599

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS6.5AI score0.00306EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/11/24 2:02 a.m.•16 views

EUVD-2025-198600

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/11/24 2:02 a.m.•39 views

CVE-2025-13578 code-projects Library System Login index.php sql injection

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/24 2:02 a.m.•11 views

CVE-2025-13578 code-projects Library System Login index.php sql injection

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/24 2:02 a.m.•38 views

CVE-2025-13578

The connected CNVD/NVD entries confirm a real vulnerability in code-projects’ Library System 1.0, specifically in the Login component’s index.php. The flaw arises from unsafely handling the Username parameter, enabling remote SQL injection. The affected file is /index.php (Login), and exploitatio...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•13 views

PT-2025-47874

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS7.1AI score0.00306EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•2 views

CVE-2025-13580: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

8.8CVSS5.6AI score0.00306EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•3 views

CVE-2025-13579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

8.8CVSS5.6AI score0.00306EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•3 views

CVE-2025-13578: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.5AI score0.00387EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•13 views

Code-Projects Library System SQL注入漏洞

Library System is a library system. The Library System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /return.php. An attacker can exploit this vulnerability to execute illegal SQL commands ...

8.8CVSS8.2AI score0.00306EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•25 views

PT-2025-47873

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•21 views

PT-2025-47875

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

6.5CVSS7.1AI score0.00306EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•13 views

Code-Projects Library System SQL注入漏洞

Library System is a library system. The Library System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /mail.php. An attacker can exploit this vulnerability to execute illegal SQL commands to stea...

8.8CVSS8.2AI score0.00306EPSS
SaveExploits1References6
Rows per page
Query Builder