Lucene search
+L

3640 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•7 views

CVE-2025-9612: Undefined Security Weakness

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...

5.1CVSS7.5AI score0.00137EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/08 6:30 p.m.•17 views

EUVD-2025-201724

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS6.5AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/08 6:30 p.m.•21 views

EUVD-2025-201729

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

7.5CVSS6.4AI score0.00387EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/08 4:15 p.m.•16 views

CVE-2025-14251

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS0.00387EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/08 4:15 p.m.•29 views

CVE-2025-14251

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/08 4:15 p.m.•27 views

CVE-2025-14250

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/08 4:15 p.m.•28 views

CVE-2025-14250

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

9.8CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/08 4:02 p.m.•47 views

CVE-2025-14251

The CVE-2025-14251 entry concerns code-projects Online Ordering System v1.0. A SQL injection vulnerability exists in the Admin Login module, specifically via manipulation of the Username argument in the /admin/ path. The issue is exploitable remotely and is associated with the Admin Login compone...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/08 4:02 p.m.•8 views

CVE-2025-14251 code-projects Online Ordering System Admin Login admin sql injection

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/08 4:02 p.m.•50 views

CVE-2025-14251 code-projects Online Ordering System Admin Login admin sql injection

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit h...

7.5CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/08 3:32 p.m.•47 views

CVE-2025-14250 code-projects Online Ordering System user_contact.php sql injection

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/08 3:32 p.m.•11 views

CVE-2025-14250 code-projects Online Ordering System user_contact.php sql injection

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/08 3:32 p.m.•50 views

CVE-2025-14250

The CVE-2025-14250 entry corresponds to code-projects Online Ordering System 1.0 where the vulnerability originates in the /user_contact.php file, in the Name parameter. Multiple connected sources (CNVD-2026-00521, RH/CVE-2025-14250, CNNVD-202512-957, EUVD-2025-201729, NVD, CVELIST) describe a SQ...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/12/08 3:15 p.m.•28 views

CVE-2025-14249

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/08 3:15 p.m.•17 views

CVE-2025-14249

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

9.8CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/08 3:02 p.m.•49 views

CVE-2025-14249 code-projects Online Ordering System user_school.php sql injection

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS0.00387EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/08 3:02 p.m.•20 views

EUVD-2025-201712

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/08 3:02 p.m.•54 views

CVE-2025-14249

CVE-2025-14249 corresponds to code-projects Online Ordering System 1.0 and is tied to a SQL injection in the parameter product_id in /user_school.php. The vulnerability arises from lack of input validation, enabling remote exploitation that may disclose or alter database data. Multiple connected ...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/08 3:02 p.m.•9 views

CVE-2025-14249 code-projects Online Ordering System user_school.php sql injection

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•9 views

CVE-2025-14250: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /usercontact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References7
Rows per page
Query Builder