Lucene search
+L

1602 matches found

Cvelist
Cvelist
added 2025/12/08 4:2 p.m.35 views

CVE-2025-14251 code-projects Online Ordering System Admin Login admin sql injection

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS0.00346EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/08 3:32 p.m.32 views

CVE-2025-14250 code-projects Online Ordering System user_contact.php sql injection

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

7.5CVSS0.00346EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/08 3:32 p.m.26 views

CVE-2025-14250

The CVE-2025-14250 entry corresponds to code-projects Online Ordering System 1.0 where the vulnerability originates in the /user_contact.php file, in the Name parameter. Multiple connected sources (CNVD-2026-00521, RH/CVE-2025-14250, CNNVD-202512-957, EUVD-2025-201729, NVD, CVELIST) describe a SQ...

9.8CVSS7.2AI score0.00346EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/12/08 3:15 p.m.10 views

CVE-2025-14249

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

9.8CVSS0.00346EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/08 3:15 p.m.11 views

CVE-2025-14249

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

9.8CVSS5.7AI score0.00346EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/08 3:2 p.m.24 views

CVE-2025-14249

CVE-2025-14249 corresponds to code-projects Online Ordering System 1.0 and is tied to a SQL injection in the parameter product_id in /user_school.php. The vulnerability arises from lack of input validation, enabling remote exploitation that may disclose or alter database data. Multiple connected ...

9.8CVSS7.2AI score0.00346EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/12/08 3:2 p.m.8 views

EUVD-2025-201712

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS7.2AI score0.00346EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/12/08 3:2 p.m.34 views

CVE-2025-14249 code-projects Online Ordering System user_school.php sql injection

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS0.00346EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.11 views

Code-Projects Online Ordering System 安全漏洞

Online Ordering System is an online ordering system. Online Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter productid in the file /userschool.php. An attacker can exploit this...

9.8CVSS7.9AI score0.00346EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.8 views

code-projects Online Ordering System 安全漏洞

Online Ordering System is an online ordering system. The Online Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/. An attacker can exploit this vulnerability t...

9.8CVSS7.9AI score0.00346EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.10 views

Code-Projects Online Ordering System 安全漏洞

Online Ordering System is an online ordering system. The Online Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Name in the file /usercontact.php. The vulnerability can be exploited by a...

9.8CVSS7.8AI score0.00346EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.16 views

PT-2025-49556

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user school.php. The manipulation of the argument product id results in sql injection. The attack may be performed from remote. The exploit has been released t...

7.5CVSS6.9AI score0.00346EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.10 views

PT-2025-49558

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /user contact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available t...

7.5CVSS7AI score0.00346EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/11/24 10:34 p.m.6 views

CVE-2025-13571

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

8.8CVSS7.2AI score0.00301EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/24 12:30 a.m.6 views

EUVD-2025-198589

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

6.5CVSS6.6AI score0.00301EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/23 10:16 p.m.6 views

CVE-2025-13571

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

8.8CVSS5.8AI score0.00301EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/23 10:2 p.m.3 views

CVE-2025-13571 code-projects Simple Food Ordering System listorder.php sql injection

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

6.5CVSS6.8AI score0.00301EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/23 10:2 p.m.16 views

CVE-2025-13571

CVE-2025-13571 affects Code-Projects Simple Food Ordering System 1.0, with a SQL injection vulnerability in /listorder.php triggered by manipulating the ID parameter. The issue is remotely exploitable, and public exploit information is cited in the initial data. Connected sources corroborate the ...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.9 views

PT-2025-47864

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

6.5CVSS7.2AI score0.00301EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.7 views

Code-Projects Simple Food Ordering System SQL注入漏洞

Code-Projects Simple Food Ordering System is a Code-Projects open source simple food ordering system. A SQL injection vulnerability exists in Code-Projects Simple Food Ordering System version 1.0, which stems from the incorrect manipulation of the parameter ID by an unknown function in the file...

8.8CVSS6.8AI score0.00301EPSS
SaveExploits1References6
Rows per page
Query Builder