Lucene search
+L

7508 matches found

Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•14 views

PT-2025-24070 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /Admin/EditCity.php. This issue leads to sql injection and can be exploited...

9.8CVSS6.9AI score0.00584EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•21 views

Code-Projects Laundry System Security Vulnerabilities

Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Type in the file /data/inserttype.php, which can be exploited by an attacker to execute arbitrar...

5.4CVSS5.5AI score0.00299EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•33 views

PT-2025-23993 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, affecting the /Admin/NewsReport.php file. The txtFrom argument is vulnerable to sql injection, allowing for remote attacks. Th...

7.5CVSS7AI score0.00492EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•19 views

PT-2025-24272 · Unknown · Code-Projects Laundry System

Name of the Vulnerable Software and Affected Versions: code-projects Laundry System version 1.0 Description: A vulnerability was found in the code, leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendations: For code-projects Laundry System version 1.0, at...

5.3CVSS5.2AI score0.00274EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•8 views

CVE-2025-5756: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to sql injection. The attack can be launched remotely. The...

9.8CVSS6.9AI score0.00584EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•13 views

CVE-2025-5729: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management System 1.0. Affected is an unknown function of the file /birthingrecord.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack...

7.5CVSS6.4AI score0.00393EPSS
SaveExploits1References1
CVE
CVE
•added 2025/06/05 11:00 p.m.•94 views

CVE-2025-5704

CVE-2025-5704 affects code-projects Real Estate Property Management System 1.0. The vulnerability arises from improper handling of the txtUserName parameter in /Admin/User.php, enabling SQL injection. Exploitation could be remote and an exploit has been disclosed publicly. The available reference...

7.5CVSS7AI score0.0048EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/06/05 4:15 a.m.•28 views

CVE-2025-5633

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be...

8.8CVSS0.00487EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/06/05 3:31 a.m.•47 views

CVE-2025-5633 code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be...

6.5CVSS0.00487EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/06/05 2:31 a.m.•46 views

CVE-2025-5631 code-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php sql injection

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00584EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•13 views

CVE-2025-5632: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument changetoadmin leads to sql injection. T...

8.8CVSS6.4AI score0.00487EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/05 12:00 a.m.•21 views

1000 Projects Online Notice Board Security Vulnerabilities

1000 Projects Online Notice Board is an online bulletin board from 1000 Projects open source. A security vulnerability exists in 1000 Projects Online Notice Board version 1.0, which stems from an incorrect manipulation of the parameter fname, resulting in SQL injection...

9.8CVSS7.2AI score0.00481EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•8 views

CVE-2025-5633: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be...

8.8CVSS6.4AI score0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•12 views

CVE-2025-5704: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/User.php. The manipulation of the argument txtUserName leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS7AI score0.0048EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•11 views

CVE-2025-5661: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument sitename leads to cross site scripting. It is...

5.4CVSS3.4AI score0.00335EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/05 12:00 a.m.•25 views

Code-Projects Patient Record Management System Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the urinalysisform.php file parameter urinalysisid. An attacker can...

8.8CVSS6.8AI score0.00462EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/05 12:00 a.m.•8 views

CVE-2025-5631: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack...

9.8CVSS7AI score0.00584EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/05 12:00 a.m.•20 views

Code-Projects: Patient Record Management System – Security Vulnerabilities

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter itrno in file /sputumform.php. An attacker can exploit thi...

7.5CVSS6.8AI score0.00393EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/06/05 12:00 a.m.•28 views

PT-2025-23909 · Unknown · 1000 Projects Online Notice Board

Name of the Vulnerable Software and Affected Versions: 1000projects Online Notice Board version 1.0 Description: A critical vulnerability was found in the 1000projects Online Notice Board, affecting unknown code of the file /register.php. The manipulation of the argument fname leads to SQL...

9.8CVSS7AI score0.00481EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/06/05 12:00 a.m.•25 views

PT-2025-23986 · Code Projects · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem affects an unknown function of the file /Admin/Property.php...

7.5CVSS6.9AI score0.00506EPSS
SaveExploits1References12
Rows per page
Query Builder