CVE-2025-12938: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

EUVD-2025-1588

Malicious code in bioql PyPI...

EUVD-2025-19431

Malicious code in bioql PyPI...

CVE-2025-6777 code-projects Food Distributor Site process_login.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue affects some unknown processing of the file /admin/processlogin.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated...

CVE-2025-6777

CVE-2025-6777 affects code-projects Food Distributor Site 1.0. The vulnerability is a SQL injection in the login pathway triggered by manipulating the username/password passed to /admin/process_login.php. Exploitation can be remote and, per sources, the exploit has been disclosed publicly. Some c...

CVE-2025-6777: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue affects some unknown processing of the file /admin/processlogin.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated...

CVE-2025-0298

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2022-24627

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...

CVE-2025-0298

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-0298 code-projects Online Book Shop process_login.php sql injection

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-0298: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-42559

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2024-42559

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2024-42559

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2024-42559: Improper Access Control

An issue in the login component processlogin.php of Hotel Management System commit 79d688 allows attackers to authenticate without providing a valid password...

CVE-2023-44165

CVE-2023-44165 entry is rejected and does not represent an active vulnerability.

CVE-2023-44164

CVE-2023-44164 involves the Email parameter of process_login.php in Online Movie Ticket Booking System v1.0. The input is not validated and is sent unfiltered to the database, described as an unauthenticated SQL injection risk in multiple sources. Affected product details indicate Projectworlds O...

CVE-2023-44164 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44164: Improper Neutralization of Special Elements used in an SQL Command

The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2022-24627: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...