Lucene search
K

2720 matches found

RedhatCVE
RedhatCVE
added 2025/07/30 12:59 a.m.5 views

CVE-2025-8248

A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

9.8CVSS7.9AI score0.00403EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/30 12:0 a.m.3 views

Online Ordering System File Upload Vulnerability

Online Ordering System is an online ordering system. A file upload vulnerability exists in Online Ordering System, which stems from the image parameter in the /admin/product.php file not effectively limiting file uploads. No details of the vulnerability are available at this time...

9.8CVSS6.5AI score0.00379EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/29 6:2 p.m.4 views

CVE-2025-8236

A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7.8AI score0.00477EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/29 5:3 p.m.4 views

CVE-2025-8235

A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/product.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

9.8CVSS7.7AI score0.00471EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/29 3:58 p.m.4 views

CVE-2025-8234

A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7.4AI score0.00471EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/29 3:0 p.m.4 views

CVE-2025-8232

A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS7.5AI score0.00471EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/29 3:0 p.m.5 views

CVE-2025-8233

A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The explo...

9.8CVSS7.5AI score0.00471EPSS
Exploits1References1
OSV
OSV
added 2025/07/28 5:16 a.m.1 views

CVE-2025-8256

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS5.5AI score0.00379EPSS
Exploits1References5
NVD
NVD
added 2025/07/28 5:16 a.m.9 views

CVE-2025-8256

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS0.00379EPSS
Exploits1References5
CVE
CVE
added 2025/07/28 4:2 a.m.25 views

CVE-2025-8256

CVE-2025-8256 affects code-projects Online Ordering System 1.0, where the argument image in /admin/product.php can be manipulated to achieve unrestricted file uploads. The trusted sources consistently describe a remote-exploitable pathway with publicly disclosed exploit details. The likely impact...

9.8CVSS7.2AI score0.00379EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/07/28 4:2 a.m.15 views

CVE-2025-8256 code-projects Online Ordering System product.php unrestricted upload

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

6.5CVSS0.00379EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/07/28 4:2 a.m.2 views

CVE-2025-8256 code-projects Online Ordering System product.php unrestricted upload

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

6.5CVSS6.5AI score0.00379EPSS
Exploits1References5
OSV
OSV
added 2025/07/28 1:15 a.m.2 views

CVE-2025-8248

A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/07/28 1:15 a.m.5 views

CVE-2025-8248

A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

9.8CVSS0.00403EPSS
Exploits1References5
CVE
CVE
added 2025/07/28 12:2 a.m.18 views

CVE-2025-8248

CVE-2025-8248 affects code-projects Online Ordering System 1.0. The vulnerability is a SQL injection in the signup.php file caused by manipulation of the firstname parameter, enabling remote exploitation. Multiple connected sources corroborate that the exploit has been disclosed publicly and coul...

9.8CVSS7.8AI score0.00403EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/07/28 12:2 a.m.10 views

CVE-2025-8248 code-projects Online Ordering System signup.php sql injection

A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

7.5CVSS0.00403EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/07/28 12:2 a.m.2 views

CVE-2025-8248 code-projects Online Ordering System signup.php sql injection

A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

7.5CVSS7.5AI score0.00403EPSS
Exploits1References5
CNVD
CNVD
added 2025/07/28 12:0 a.m.9 views

Online Ordering System user.php File SQL Injection Vulnerability

Online Ordering System is an online ordering system. Online Ordering System has a SQL injection vulnerability that originates from an unfiltered parameter un in the /admin/user.php file that allows manipulation of database queries. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00471EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/07/28 12:0 a.m.5 views

PT-2025-31045 · Code Projects · Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System 1.0, specifically within the /admin/product.php file. The manipulation of the image argument allows for unrestricted...

9.8CVSS6.4AI score0.00379EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/07/28 12:0 a.m.4 views

Code-Projects Online Ordering System 代码问题漏洞

Online Ordering System is an online ordering system. A file upload vulnerability exists in Online Ordering System, which stems from the image parameter in the /admin/product.php file not effectively limiting file uploads. No details of the vulnerability are available at this time...

9.8CVSS6.6AI score0.00379EPSS
Exploits1References6
Rows per page
Query Builder