Lucene search
+L

33767 matches found

CNVD
CNVD
added 2025/09/25 12:00 a.m.9 views

Hostel Management System mod_roomtype/index.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /justines/admin/modroomtype/index.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00421EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/25 12:00 a.m.16 views

Hostel Management System log_email Parameter SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter logemail in the file /justines/index.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00421EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/25 12:00 a.m.8 views

Hostel Management System login.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter email in the file /justines/admin/login.php. An attacker can use this...

9.8CVSS8.3AI score0.00421EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/25 12:00 a.m.12 views

Hostel Management System index.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /justines/admin/modamenities/index.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00478EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/25 12:00 a.m.18 views

Hostel Management System mod_comments/index.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /justines/admin/modcomments/index.php. An attacker can use this...

9.8CVSS8.3AI score0.00683EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/09/25 12:00 a.m.10 views

Resume management system SQL注入漏洞

Resume management system is a resume management system by JackieDYH Personal Developer. A SQL injection vulnerability exists in the Resume management system, which stems from an incorrect manipulation of the parameter userid in the file /admin/show.php, which could lead to a SQL injection attack...

7.5CVSS7.7AI score0.00328EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/09/24 8:30 p.m.15 views

CVE-2025-10813

A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/modreports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public...

9.8CVSS7.3AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 7:34 p.m.12 views

CVE-2025-10812

A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/modamenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 5:34 p.m.13 views

CVE-2025-10808

A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of the argument Type causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 1:33 p.m.22 views

CVE-2025-10799

A security flaw has been discovered in code-projects Hostel Management System 1.0. The affected element is an unknown function of the file /justines/admin/modreservation/index.php?view=view. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is...

9.8CVSS6.9AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 12:32 p.m.19 views

CVE-2025-10797

A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /justines/index.php. This manipulation of the argument logemail causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 12:32 p.m.23 views

CVE-2025-10798

A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/modroomtype/index.php?view=view. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 11:33 a.m.14 views

CVE-2025-10796

A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could ...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/23 6:15 p.m.13 views

CVE-2025-29084

SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php file...

6.5CVSS0.00378EPSS
SaveExploits1References1
CVE
CVE
added 2025/09/23 8:02 a.m.32 views

CVE-2025-10851

Campcodes Gym Management System 1.0 contains a SQL injection in the /ajax.php?action=login endpoint caused by manipulating the Username parameter. This is exploitable remotely, and multiple sources confirm that an exploit has been released publicly. The CVE-2025-10851 records impact to unknown fu...

9.8CVSS6.7AI score0.00478EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/09/23 3:15 a.m.8 views

CVE-2025-10833

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References4
NVD
NVD
added 2025/09/23 3:15 a.m.13 views

CVE-2025-10833

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

9.8CVSS0.00421EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/09/23 2:32 a.m.8 views

CVE-2025-10833 1000projects Bookstore Management System login.php sql injection

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

7.5CVSS6.7AI score0.00421EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/09/23 2:32 a.m.27 views

CVE-2025-10833 1000projects Bookstore Management System login.php sql injection

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

7.5CVSS0.00421EPSS
SaveExploits1References4
CVE
CVE
added 2025/09/23 2:32 a.m.40 views

CVE-2025-10833

The CVE-2025-10833 affects 1000projects Bookstore Management System 1.0, with a vulnerability in login.php where the unm parameter is improperly handled, enabling SQL injection. Exploitation is possible remotely and the exploit has been publicly disclosed. Connected documents note exposure and pu...

9.8CVSS6.7AI score0.00421EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder