Lucene search
+L

593 matches found

CVE
CVE
•added 2025/09/27 6:32 p.m.•47 views

CVE-2025-11074

Affected software: code-projects Project Monitoring System 1.0. Vulnerability: SQL injection in the login.php file caused by unsafe handling of username/password inputs, enabling remote exploitation. Root cause/condition: Manipulation of the parameters in /login.php leads to SQL injection; exploi...

9.8CVSS6.6AI score0.00478EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/27 6:32 p.m.•5 views

CVE-2025-11074 code-projects Project Monitoring System login.php sql injection

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00478EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•2 views

CVE-2025-11074: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.5AI score0.00478EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/27 12:00 a.m.•23 views

PT-2025-39738

Name of the Vulnerable Software and Affected Versions code-projects Project Monitoring System version 1.0 Description A flaw exists in code-projects Project Monitoring System 1.0 that allows for SQL injection. The issue is located in an unknown function of the /login.php file. Manipulation of the...

9.8CVSS7.4AI score0.00478EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2025/09/27 12:00 a.m.•15 views

Code-Projects Project Monitoring System SQL注入漏洞

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters username/password in the file /login.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00478EPSS
SaveExploits1References6
OSV
OSV
•added 2025/09/18 2:15 p.m.•18 views

CVE-2025-10670

A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /checkprofile.php. Executing manipulation of the argument profileid can lead to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/18 2:02 p.m.•35 views

CVE-2025-10670

CVE-2025-10670 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is in the processing of /check_profile.php, where manipulating the profile_id parameter can lead to an SQL injection. The issue is exploitable remotely and exploits have been published ...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/18 12:00 a.m.•2 views

CVE-2025-10670: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /checkprofile.php. Executing manipulation of the argument profileid can lead to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/18 12:00 a.m.•16 views

PT-2025-38401

Name of the Vulnerable Software and Affected Versions itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0 Description A flaw exists in itsourcecode E-Logbook with Health Monitoring System for COVID-19, potentially allowing for SQL injection. The issue is related to the...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References7
OSV
OSV
•added 2025/09/17 8:15 p.m.•19 views

CVE-2025-10614

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

6.1CVSS4.3AI score0.0035EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/17 8:15 p.m.•49 views

CVE-2025-10614

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

6.1CVSS0.0035EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/17 7:32 p.m.•43 views

CVE-2025-10614

CVE-2025-10614 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is a cross-site scripting flaw in the /print_reports_prev.php file caused by manipulation of the profile_id argument. It is exploitable remotely and has been publicly disclosed. Connect...

6.1CVSS4AI score0.0035EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/17 7:32 p.m.•19 views

CVE-2025-10614 itsourcecode E-Logbook with Health Monitoring System for COVID-19 print_reports_prev.php cross site scripting

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

5.3CVSS5.3AI score0.0035EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/09/17 12:00 a.m.•22 views

PT-2025-38256

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0 Description: A cross-site scripting issue exists due to manipulation of the profile id argument in the /print reports prev.php file. This allows for remote attacks...

5.3CVSS4.3AI score0.0035EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/09/17 12:00 a.m.•17 views

itsourcecode E-Logbook with Health Monitoring System for COVID-19 代码注入漏洞

itsourcecode E-Logbook with Health Monitoring System for COVID-19 is an electronic logging system for the New Crown Pneumonia Health Monitoring System for COVID-19 open source by itsourcecode. A code injection vulnerability exists in itsourcecode E-Logbook with Health Monitoring System for COVID-...

6.1CVSS4.9AI score0.0035EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•3 views

CVE-2025-10614: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

6.1CVSS3.9AI score0.0035EPSS
SaveExploits1References6
OSV
OSV
•added 2025/09/14 10:15 p.m.•14 views

CVE-2025-10411

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

6.1CVSS4.2AI score0.00357EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/14 10:15 p.m.•20 views

CVE-2025-10411

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

6.1CVSS0.00357EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•1 views

CVE-2025-10411: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

6.1CVSS4AI score0.00357EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/14 12:00 a.m.•27 views

PT-2025-37431

Name of the Vulnerable Software and Affected Versions itsourcecode E-Logbook version 1.0 Description A cross-site scripting issue exists due to the manipulation of the profile id argument in the POST Request Handler component. The vulnerability affects the processing of the file...

6.1CVSS4AI score0.00357EPSS
SaveExploits1References12
Rows per page
Query Builder