Lucene search
+L

33796 matches found

CNNVD
CNNVD
added 2025/08/16 12:00 a.m.11 views

WordPress plugin School Management System for Wordpress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

7.5CVSS8AI score0.00429EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/16 12:00 a.m.14 views

WordPress plugin School Management System for Wordpress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

8.8CVSS6.9AI score0.0057EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/15 10:32 p.m.20 views

CVE-2025-8929

A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

8.8CVSS7.9AI score0.00391EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:29 p.m.25 views

CVE-2012-10056

PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality. Authenticated users can upload files to the mods/documents/uploads/ directory without any restriction on file type or extension. Because this directory is publicly accessib...

8.7CVSS7.7AI score0.01019EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:29 p.m.24 views

CVE-2011-10009

S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending...

8.7CVSS7.6AI score0.01286EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/15 8:32 p.m.28 views

CVE-2025-8926

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/15 7:23 p.m.26 views

CVE-2025-8925

A vulnerability has been found in itsourcecode Sports Management System 1.0. Affected is an unknown function of the file /Admin/match.php. The manipulation of the argument code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS7.9AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/15 1:15 p.m.26 views

CVE-2025-9052

A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file /updatepackage.php. The manipulation of the argument s1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References4
NVD
NVD
added 2025/08/15 1:15 p.m.15 views

CVE-2025-9052

A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file /updatepackage.php. The manipulation of the argument s1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS0.00421EPSS
SaveExploits1References4
OSV
OSV
added 2025/08/15 1:15 p.m.24 views

CVE-2025-9053

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /updatesubcategory.php. The manipulation of the argument t1/s1 leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS5.8AI score0.00451EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/15 1:15 p.m.18 views

CVE-2025-9053

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /updatesubcategory.php. The manipulation of the argument t1/s1 leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS0.00451EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/15 1:02 p.m.44 views

CVE-2025-9053

CVE-2025-9053 affects projectworlds Travel Management System 1.0. The vulnerability is a SQL injection in the updatesubcategory.php file, via manipulated t1/s1 parameters. It is exploitable remotely and publicly disclosed, with potential impact on confidentiality, integrity, and availability. No ...

9.8CVSS7.8AI score0.00451EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/15 12:32 p.m.10 views

CVE-2025-9052 projectworlds Travel Management System updatepackage.php sql injection

A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file /updatepackage.php. The manipulation of the argument s1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

7.5CVSS7.6AI score0.00421EPSS
SaveExploits1References4
CVE
CVE
added 2025/08/15 12:32 p.m.58 views

CVE-2025-9052

Summary: CVE-2025-9052 affects projectworlds Travel Management System 1.0. A vulnerability exists in the /updatepackage.php file where manipulating the s1 parameter enables SQL injection. The issue is exploitable remotely, and public exploitation information is available. Multiple connected sourc...

9.8CVSS7.6AI score0.00421EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/08/15 12:15 p.m.26 views

CVE-2025-9051

A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /updatecategory.php. The manipulation of the argument t1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References4
NVD
NVD
added 2025/08/15 12:15 p.m.13 views

CVE-2025-9051

A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /updatecategory.php. The manipulation of the argument t1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

9.8CVSS0.00421EPSS
SaveExploits1References4
NVD
NVD
added 2025/08/15 12:15 p.m.16 views

CVE-2025-9050

A vulnerability was found in projectworlds Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addcategory.php. The manipulation of the argument t1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

9.8CVSS0.00421EPSS
SaveExploits1References4
OSV
OSV
added 2025/08/15 12:15 p.m.28 views

CVE-2025-9050

A vulnerability was found in projectworlds Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addcategory.php. The manipulation of the argument t1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/08/15 12:02 p.m.18 views

CVE-2025-9051 projectworlds Travel Management System updatecategory.php sql injection

A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /updatecategory.php. The manipulation of the argument t1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

7.5CVSS7.6AI score0.00421EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/08/15 11:32 a.m.25 views

CVE-2025-9050 projectworlds Travel Management System addcategory.php sql injection

A vulnerability was found in projectworlds Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addcategory.php. The manipulation of the argument t1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

7.5CVSS0.00421EPSS
SaveExploits1References4
Rows per page
Query Builder