Code-Projects School Fees Payment System Security Vulnerabilities

School Fees Payment System is a tuition payment system. School Fees Payment System is vulnerable to a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. No details of the vulnerability are...

PT-2025-26310 · Unknown · Code-Projects School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A problematic issue was found in the system, leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendations: For code-projects School Fees...

GitLab Enterprise Edition and GitLab Community Edition security vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...

PT-2025-26272 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical issue was found in the code-projects Online Shoe Store, affecting an unknown functionality of the file /cart.php. The manipulation of the qty argument leads to SQL injection...

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware. "The malware enables data exfiltration including credentials, browser data, and session tokens, remote access, and long-term...

CVE-2025-6159 code-projects Hostel Management System allocate_room.php sql injection

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6159 code-projects Hostel Management System allocate_room.php sql injection

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6159: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocateroom.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-25617 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical vulnerability was found in the code-projects Hostel Management System. This issue affects unknown code of the file /allocate room.php. The manipulation of the search b...

CVE-2025-6124

The CVE-2025-6124 entry concerns code-projects Restaurant Order System 1.0. A SQL injection flaw exists in the file /tablelow.php caused by improper handling of the ID parameter. The issue can be triggered remotely and, according to multiple sources in the connected documents, the exploit has bee...

CVE-2025-6123 code-projects Restaurant Order System payment.php sql injection

A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6122 code-projects Restaurant Order System table.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-6122: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-6124: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. This issue affects some unknown processing of the file /tablelow.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2025-6123: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been...

Code-Projects Restaurant Order System Injection Vulnerabilities

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. An injection vulnerability exists in code-projects Restaurant Order System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /table.php...

PT-2025-25555 · Code Projects · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical issue affects the processing of the file /tablelow.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The...

PT-2025-25553 · Unknown · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical vulnerability has been found in the code-projects Restaurant Order System, affecting the /payment.php file. The manipulation of the tabidNoti argument leads to SQL...

Code-Projects Restaurant Order System Injection Vulnerabilities

Code-Projects Restaurant Order System is Code-Projects open source a restaurant order system. Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to incorrect manipulation of the parameter tabidNoti in the file...

Code-Projects Restaurant Order System Injection Vulnerabilities

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameter ID in the file /tablelow.php...