CVE-2025-22606 Coolify Command Injection Vulnerability in Project Name

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In version 4.0.0-beta.358 and possibly earlier versions, when creating or updating a "project," it is possible to inject arbitrary shell commands by altering the project name. If a name includes...

CVE-2025-0336

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-0336 Codezips Project Management System teacher.php sql injection

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-0336 Codezips Project Management System teacher.php sql injection

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-0336

The CVE-2025-0336 entry concerns Codezips Project Management System version 1.0 with a SQL injection in an unclear area of /pages/forms/teacher.php caused by manipulation of the argument name. Attacks can be launched remotely, and public disclosure is noted. Several connected sources corroborate:...

PT-2025-3833 · Unknown · Codezips Project Management System

Name of the Vulnerable Software and Affected Versions: Codezips Project Management System version 1.0 Description: A critical issue has been found in Codezips Project Management System, affecting an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to...

Codezips Project Management System 注入漏洞

Codezips Project Management System is an open source project management system from Codezips. An injection vulnerability exists in Codezips Project Management System version 1.0, which originates from a SQL injection in the parameter name...

CVE-2025-21616

Plane is an open-source project management tool. A cross-site scripting XSS vulnerability has been identified in Plane versions prior to 0.23. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims'...

CVE-2025-21616

CVE-2025-21616 — Plane XSS via SVG upload . Plane is affected when running versions prior to 0.23. The vulnerability arises through profile image uploads: an authenticated user can upload an SVG containing malicious JavaScript, which is executed in other users’ browsers when viewing the affected ...

CVE-2025-21616 Plane has a Cross-site scripting (XSS) via SVG image upload

Plane is an open-source project management tool. A cross-site scripting XSS vulnerability has been identified in Plane versions prior to 0.23. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims'...

CVE-2025-21616 Plane has a Cross-site scripting (XSS) via SVG image upload

Plane is an open-source project management tool. A cross-site scripting XSS vulnerability has been identified in Plane versions prior to 0.23. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims'...

CVE-2025-21616 Plane has a Cross-site scripting (XSS) via SVG image upload

Plane is an open-source project management tool. A cross-site scripting XSS vulnerability has been identified in Plane versions prior to 0.23. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims'...

CVE-2025-0233

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/course.php. The manipulation of the argument coursename leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-0233

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/course.php. The manipulation of the argument coursename leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-0233 Codezips Project Management System course.php sql injection

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/course.php. The manipulation of the argument coursename leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-0233

CVE-2025-0233 affects Codezips Project Management System 1.0. The vulnerability is an SQL injection in the /pages/forms/course.php file caused by the course_name argument. It is exploitable remotely and has been publicly disclosed. Connected sources indicate no official fix version; a workaround ...

CVE-2025-0233 Codezips Project Management System course.php sql injection

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/course.php. The manipulation of the argument coursename leads to sql injection. It is possible to initiate the attack remotely. The exploi...

PT-2025-3803 · Unknown · Codezips Project Management System

Name of the Vulnerable Software and Affected Versions: Codezips Project Management System version 1.0 Description: A critical issue has been found in Codezips Project Management System. This issue affects an unknown part of the file /pages/forms/course.php. The manipulation of the course name...

Codezips Project Management System 注入漏洞

Codezips Project Management System is a Codezips open source project management system. An injection vulnerability exists in Codezips Project Management System version 1.0, which originates from the coursename parameter in the /pages/forms/course.php file and can lead to SQL injection...

CVE-2025-0213

A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/updateforms.php?action=changepic2&id=4. The manipulation of the argument file leads to unrestricted upload. The attack can be initiate...