CVE-2024-12431

Removed by vendor...

CVE-2024-12431 Missing Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

CVE-2024-12431 Missing Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE, which stems from the ability of...

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-0298 code-projects Online Book Shop process_login.php sql injection

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /detail.php page...

PT-2025-3815 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A problem was found in the file /booklist.php?subcatid=1, where the manipulation of the subcatnm argument leads to cross site scripting. The attack may be launched remotely...

Code-Projects Online Book Shop 安全漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the usernm parameter of the /processlogin.php page...

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

Code-Projects Online Book Shop 注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. An injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which stems from an SQL injection vulnerability in the cat parameter of the /subcat.php page...

CVE-2025-0230

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Code-Projects Travel Management System 注入漏洞

Code-Projects Travel Management System is a Code-Projects open source travel management system. An injection vulnerability exists in Code-Projects Travel Management System version 1.0, which originates from the pid/t1/t2/t3/t4/t5/t6/t7 parameters in the /enquiry.php page containing a SQL injectio...

PT-2025-3798 · Unknown · Code-Projects Local Storage Todo App

Name of the Vulnerable Software and Affected Versions: code-projects Local Storage Todo App version 1.0 Description: A problem has been found in the code that affects the /js-todo-app/index.html file. The issue arises from the manipulation of the Add argument, leading to cross-site scripting. Thi...

CVE-2025-0206 code-projects Online Shoe Store index.php access control

A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed...