Lucene search
+L

7508 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•10 views

CVE-2025-6903: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The explo...

9.8CVSS7.1AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•9 views

CVE-2025-6902: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /phpaction/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•6 views

CVE-2025-6901: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•8 views

CVE-2025-6900: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS6.2AI score0.00406EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•6 views

CVE-2025-6884: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /searchindex.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS6.4AI score0.00397EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•26 views

PT-2025-27435 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the ID argument leads t...

9.8CVSS6.8AI score0.00487EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•25 views

PT-2025-27437 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/add cars.php. The manipulation of the car name argument leads to SQL injection. The attack can be launched remotely...

9.8CVSS6.9AI score0.00487EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•23 views

PT-2025-27440 · Unknown · Code-Projects Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental System version 1.0 Description: A critical vulnerability was found in the code-projects Car Rental System, affecting unknown code in the file /book car.php. The manipulation of the fname argument leads to SQL injectio...

9.8CVSS6.8AI score0.00487EPSS
SaveExploits2References11
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•18 views

PT-2025-27414 · Code Projects · Code-Projects Movie Ticketing System

Name of the Vulnerable Software and Affected Versions: code-projects Movie Ticketing System version 1.0 Description: A critical issue affects the processing of the file "/ticketConfirmation.php". The manipulation of the Date argument leads to SQL injection. The attack may be initiated remotely...

8.8CVSS6.5AI score0.00397EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•28 views

PT-2025-27415 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the Username argument in an unknown function of the file /php action/createUser.ph...

9.8CVSS6.9AI score0.00487EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•23 views

PT-2025-27429 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical vulnerability has been found in the code-projects Library System, affecting unknown code of the file /add-book.php. The manipulation of the image argument leads to unrestricted...

9.8CVSS6.1AI score0.00406EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•25 views

PT-2025-27403

Name of the Vulnerable Software and Affected Versions: code-projects Staff Audit System version 1.0 Description: A critical issue has been found in the Staff Audit System, affecting the processing of the file /search index.php. The manipulation of the Search argument leads to SQL injection. This...

8.8CVSS6.2AI score0.00397EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•22 views

PT-2025-27408 · Unknown · Code-Projects Movie Ticketing System

Name of the Vulnerable Software and Affected Versions: code-projects Movie Ticketing System version 1.0 Description: A critical issue has been discovered, affecting the /logIn.php file. The manipulation of the postName argument leads to SQL injection. This issue can be exploited remotely...

9.8CVSS7AI score0.00487EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•21 views

PT-2025-27432 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/removeUser.php. The manipulation of the userid argument leads to SQL injection. The attack can be initiated...

9.8CVSS6.9AI score0.00487EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•27 views

Code-Projects Movie Ticketing System Injection Vulnerabilities

Code-Projects Movie Ticketing System is an open source movie ticketing system from Code-Projects. An injection vulnerability exists in code-projects Movie Ticketing System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter Date in the file...

8.8CVSS6.5AI score0.00397EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•16 views

Code-Projects Online Hotel Booking Injection Vulnerability

Code-Projects Online Hotel Booking is an open source online hotel booking system by Code-Projects. An injection vulnerability exists in code-projects Online Hotel Booking version 1.0, which results from SQL injection due to incorrect manipulation of the parameter uname in the file...

9.8CVSS7.2AI score0.00487EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•14 views

Code-Projects Movie Ticketing System Injection Vulnerabilities

Code-Projects Movie Ticketing System is Code-Projects open source movie ticketing system. Code-Projects Movie Ticketing System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to a misuse of the parameter postName in the file /logIn.php...

9.8CVSS7.2AI score0.00487EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•18 views

Code-Projects Staff Audit System Security Vulnerabilities

Staff Audit System is an employee audit system. Staff Audit System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /searchindex.php. An attacker can exploit this vulnerability to execut...

8.8CVSS6.8AI score0.00397EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•24 views

PT-2025-27463 · Code Projects · Code-Projects Online Hotel Booking

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Booking version 1.0 Description: A critical vulnerability has been found in the code-projects Online Hotel Booking software. This issue affects unknown code of the file /admin/registration.php. The manipulation of t...

9.8CVSS6.8AI score0.00487EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2025/06/29 7:00 a.m.•12 views

CVE-2025-6850 code-projects Simple Forum forum1.php sql injection

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

6.5CVSS6.4AI score0.00397EPSS
SaveExploits1References5
Rows per page
Query Builder