Code-Projects Point of Sales and Inventory Management System Injection Vulnerabilities

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which stems from an SQL injection...

PT-2025-3764 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop version 1.0 Description: A problem has been found in the code that affects the /view.php file. Manipulating the name/details argument leads to cross site scripting attacks. These attacks can be started from a remote...

PT-2025-3770 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue was found in the code-projects Point of Sales and Inventory Management System. This issue affects the /user/search.php file, where the...

CVE-2025-0199: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minuscart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

CVE-2025-0195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/delproduct.php. The manipulation of the argument id leads to sql injection. The attack may be launch...

CVE-2025-0174: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/searchresult2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. I...

CVE-2025-0176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/addcart.php. The manipulation of the argument id/qty leads to sql injection. The attack may be initiated...

CVE-2025-0175: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-0172

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

CVE-2025-0172 code-projects Chat System deleteroom.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

CVE-2025-0171

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2025-0171

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2025-0171

CVE-2025-0171 affects code-projects Chat System 1.0. A SQL injection exists in the unknown function of /admin/deleteuser.php, exploitable remotely via the id parameter. Multiple sources classify the issue as critical with public disclosures. There is no provided official fixed version in the docu...

CVE-2024-13093

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...

CVE-2024-13092

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /parse/calljob/searchajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated...

CVE-2024-13093 code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...

CVE-2024-13092

CVE-2024-13092 affects code-projects Job Recruitment 1.0, specifically the Job Post Handler’s file _parse/_call_job/search_ajax.php. The vulnerability arises from improper handling of the parameter n, enabling SQL injection via remote access. Multiple sources confirm the impact and disclosure of ...

CVE-2024-13092 code-projects Job Recruitment Job Post search_ajax.php sql injection

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /parse/calljob/searchajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated...

PT-2025-3761 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting an unknown functionality of the file /admin/deleteroom.php. The manipulation of the id argument leads to SQL...

PT-2025-3760 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical vulnerability was found in the code-projects Chat System. It affects an unknown function of the file /admin/deleteuser.php. The manipulation of the id argument leads to SQL...