Lucene search
+L

7500 matches found

CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•20 views

Code-Projects Patient Record Management System security vulnerabilities

Code-Projects Patient Record Management System is an open source patient record management system from Code-Projects. A security vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter...

7.5CVSS6.8AI score0.00454EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•17 views

Code-Projects Personal Diary Management System Security Vulnerabilities

Code-Projects Personal Diary Management System is an open source personal diary management system from Code-Projects. A security vulnerability exists in Code-Projects Personal Diary Management System version 1.0, which is caused by a stack buffer overflow due to incorrect manipulation of the...

7.8CVSS5.7AI score0.0035EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•15 views

Code-Projects Train Ticket Reservation System security vulnerabilities

Code-Projects Train Ticket Reservation System is an open source train ticket reservation system from Code-Projects. A security vulnerability exists in Code-Projects Train Ticket Reservation System version 1.0, which stems from a stack buffer overflow due to an incorrect manipulation of the...

5.5CVSS5.5AI score0.00318EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•24 views

Code-Projects ATM Banking Security Vulnerabilities

Code-Projects ATM Banking is an atm management system from Code-Projects open source. A security vulnerability exists in Code-Projects ATM Banking version 1.0, which stems from a business logic error in the moneyDeposit and moneyWithdraw functions that could lead to a local attack...

5.5CVSS4.7AI score0.00313EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•14 views

PT-2025-18097 · Unknown · Code-Projects Personal Diary Management System

Name of the Vulnerable Software and Affected Versions: code-projects Personal Diary Management System version 1.0 Description: A critical issue was found in the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to a stack-based buffer overflow...

7.8CVSS5.2AI score0.0035EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•8 views

CVE-2025-4029: Stack-based Buffer Overflow

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. Local access is require...

7.8CVSS6AI score0.0035EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•24 views

Code-Projects News Publishing Site Dashboard – Code Issues and Vulnerabilities

Code-Projects News Publishing Site Dashboard is an open source news publishing site dashboard from Code-Projects. A code issue vulnerability exists in version 1.0 of Code-Projects News Publishing Site Dashboard, which stems from a misbehavior of the parameter categoryimage in the file...

9.8CVSS6.4AI score0.00534EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•22 views

Code-Projects Patient Record Management System Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter id/lastname in file /editrpatient.php.php. An attacker...

7.5CVSS7AI score0.00454EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/04/26 9:10 a.m.•40 views

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

6.5CVSS7.9AI score0.0026EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/04/25 3:09 p.m.•4 views

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

9CVSS7AI score0.00435EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/25 3:09 p.m.•5 views

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

9CVSS7AI score0.00435EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/25 3:09 p.m.•21 views

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

9CVSS7AI score0.00435EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/24 3:15 p.m.•18 views

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/24 3:15 p.m.•42 views

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

6.5CVSS0.0026EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•8 views

CVE-2025-44135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profileupdate.php. Manipulating the parameter username will cause SQL injection attacks...

6.5CVSS5.7AI score0.0026EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•18 views

Code-Projects Online Class and Exam Scheduling System Security Vulnerabilities

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which originates from a SQL injection due to incorrect...

6.5CVSS7.6AI score0.0026EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/04/24 12:00 a.m.•35 views

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

0.0026EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/04/24 12:00 a.m.•15 views

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

7.8AI score0.0026EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•18 views

PT-2025-17734 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Class and Exam Scheduling System version 1.0 Description: A vulnerability was found in the file /Scheduling/pages/class save.php, where manipulation of the class parameter can lead to SQL injection attacks. Recommendation...

6.5CVSS7.4AI score0.0026EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•8 views

CVE-2025-44134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

6.5CVSS5.7AI score0.0026EPSS
SaveExploits1References1
Rows per page
Query Builder