Lucene search
+L

527 matches found

CNVD
CNVD
added 2025/09/29 12:0 a.m.3 views

Project Monitoring System Cross-Site Scripting Vulnerability

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a cross-site scripting vulnerability that stems from the /onlineJobSearchEngine/postjob.php file not adequately filtering the txtapplyto parameter. No details of the vulnerability are available at thi...

5.4CVSS6.3AI score0.00264EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/29 12:0 a.m.6 views

Project Monitoring System login.php File SQL Injection Vulnerability

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters username/password in the file /login.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00441EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/28 11:15 p.m.12 views

CVE-2025-11124

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.4CVSS0.00264EPSS
SaveExploits1References6
OSV
OSV
added 2025/09/28 11:15 p.m.19 views

CVE-2025-11124

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.4CVSS4.2AI score0.00264EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/09/28 11:2 p.m.9 views

CVE-2025-11124 code-projects Project Monitoring System postjob.php cross site scripting

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.1CVSS5.4AI score0.00264EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/09/28 6:48 p.m.9 views

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.8AI score0.00441EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/28 12:0 a.m.28 views

PT-2025-39795

Name of the Vulnerable Software and Affected Versions code-projects Project Monitoring System version 1.0 Description A cross site scripting issue exists due to manipulation of the txtapplyto argument. The issue is located in the file /onlineJobSearchEngine/postjob.php within an unknown function...

5.1CVSS3.9AI score0.00264EPSS
SaveExploits1References11
NVD
NVD
added 2025/09/27 7:15 p.m.10 views

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS0.00441EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/27 7:15 p.m.5 views

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/27 6:32 p.m.14 views

CVE-2025-11074 code-projects Project Monitoring System login.php sql injection

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS0.00441EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/27 6:32 p.m.32 views

CVE-2025-11074

Affected software: code-projects Project Monitoring System 1.0. Vulnerability: SQL injection in the login.php file caused by unsafe handling of username/password inputs, enabling remote exploitation. Root cause/condition: Manipulation of the parameters in /login.php leads to SQL injection; exploi...

9.8CVSS6.6AI score0.00441EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/27 6:32 p.m.3 views

CVE-2025-11074 code-projects Project Monitoring System login.php sql injection

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.6AI score0.00441EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/27 12:0 a.m.16 views

PT-2025-39738

Name of the Vulnerable Software and Affected Versions code-projects Project Monitoring System version 1.0 Description A flaw exists in code-projects Project Monitoring System 1.0 that allows for SQL injection. The issue is located in an unknown function of the /login.php file. Manipulation of the...

9.8CVSS7.4AI score0.00441EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/09/27 12:0 a.m.9 views

Code-Projects Project Monitoring System SQL注入漏洞

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters username/password in the file /login.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00441EPSS
SaveExploits1References6
OSV
OSV
added 2025/09/18 2:15 p.m.11 views

CVE-2025-10670

A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /checkprofile.php. Executing manipulation of the argument profileid can lead to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/18 2:2 p.m.22 views

CVE-2025-10670

CVE-2025-10670 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is in the processing of /check_profile.php, where manipulating the profile_id parameter can lead to an SQL injection. The issue is exploitable remotely and exploits have been published ...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/18 12:0 a.m.10 views

PT-2025-38401

Name of the Vulnerable Software and Affected Versions itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0 Description A flaw exists in itsourcecode E-Logbook with Health Monitoring System for COVID-19, potentially allowing for SQL injection. The issue is related to the...

9.8CVSS7.4AI score0.00387EPSS
SaveExploits1References7
OSV
OSV
added 2025/09/17 8:15 p.m.9 views

CVE-2025-10614

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

6.1CVSS4.3AI score0.00322EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/17 8:15 p.m.39 views

CVE-2025-10614

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

6.1CVSS0.00322EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/17 7:32 p.m.25 views

CVE-2025-10614

CVE-2025-10614 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is a cross-site scripting flaw in the /print_reports_prev.php file caused by manipulation of the profile_id argument. It is exploitable remotely and has been publicly disclosed. Connect...

6.1CVSS4AI score0.00322EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder