Lucene search
+L

5735 matches found

CNNVD
CNNVD
added 2026/01/02 12:0 a.m.15 views

code-projects Content Management System SQL注入漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter Value in the file search.php, which...

9.8CVSS7.7AI score0.00414EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.12 views

PT-2026-1112

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that allows for SQL injection. The issue is located in the /pages.php file, specifically through manipulation of the ID...

7.5CVSS6.9AI score0.00339EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.9 views

Code-Projects Content Management System SQL注入漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter del in the file /admin/delete.php, which...

9.8CVSS7.1AI score0.00339EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.8 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /Frontend/Feedback.php, which could lead to a SQ...

9.8CVSS7.6AI score0.00399EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.19 views

PT-2026-1066

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that involves the processing of the /admin/delete.php file. Manipulation of the del argument within this file can lead to...

7.5CVSS6.9AI score0.00339EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.18 views

PT-2026-1061

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that allows for SQL injection. The issue is located in the search.php file and involves manipulation of the Value argument...

7.5CVSS6.9AI score0.00414EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.14 views

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A code issue vulnerability exists in Code-Projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter image in the file /admin/editposts.php, which...

9.8CVSS5.2AI score0.00311EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.11 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from incorrect manipulation of the parameter ID in the file /Frontend/ViewSongs.php, which could lead to a SQL...

9.8CVSS7.6AI score0.00339EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/01 7:15 p.m.9 views

CVE-2025-15410

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Lemail leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available a...

9.8CVSS0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 7:2 p.m.27 views

CVE-2025-15410

Code-Projects Online Guitar Store 1.0 is affected by a SQL injection in login.php via the L_email parameter. Multiple sources (NVD, Red Hat, CVE listings, and PT Security) confirm remote exploitation and that a public exploit exists. The vulnerability stems from improper handling of input in /log...

9.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/01 7:2 p.m.39 views

CVE-2025-15410 code-projects Online Guitar Store login.php sql injection

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Lemail leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available a...

7.5CVSS0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/01 6:32 p.m.41 views

CVE-2025-15409 code-projects Online Guitar Store Delete_product.php sql injection

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00394EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 6:32 p.m.25 views

CVE-2025-15409

CVE-2025-15409 affects code-projects Online Guitar Store 1.0. The vulnerability is an SQL injection in /admin/Delete_product.php via manipulation of the del_pro parameter, exploitable remotely. Public disclosures exist. Impact includes potential disclosure/integrity/availability harm as per CVSS ...

9.8CVSS7.2AI score0.00394EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/01/01 6:2 p.m.23 views

CVE-2025-15408

CVE-2025-15408 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in /admin/Create_product.php via the dre_title parameter. Exploitation is possible remotely and the exploit has been publicly released. Connected documents confirm the root cause (unsafely processed...

9.8CVSS7.1AI score0.00335EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/01 5:32 p.m.34 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/01 5:32 p.m.6 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS6.8AI score0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 5:32 p.m.21 views

CVE-2025-15407

CVE-2025-15407 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/Create_category.php, triggered by manipulation of the dre_Ctitle parameter. Exploitation could be performed remotely, and public disclosures exist. Multiple...

9.8CVSS7.3AI score0.00335EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/01/01 12:0 a.m.10 views

Code-Projects Online Guitar Store SQL注入漏洞

Code-Projects Online Guitar Store is a Code-Projects open source online guitar store. A SQL injection vulnerability exists in Code-Projects Online Guitar Store version 1.0, which stems from an incorrect manipulation of the parameter dretitle in the file /admin/Createproduct.php, which could lead ...

9.8CVSS7.8AI score0.00335EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-7995

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into...

5.4CVSS5.5AI score0.00382EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.85 views

PT-2026-1014

Name of the Vulnerable Software and Affected Versions code-projects Online Guitar Store version 1.0 Description A SQL injection issue exists in code-projects Online Guitar Store version 1.0. The issue is located in an unknown function within the /admin/Create product.php file. Manipulating the dr...

9.8CVSS7.2AI score0.00335EPSS
SaveExploits1References12
Rows per page
Query Builder