Lucene search
+L

5716 matches found

CNNVD
CNNVD
added 2026/01/02 12:0 a.m.8 views

code-projects Content Management System SQL注入漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /pages.php, which could...

9.8CVSS7.8AI score0.00339EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.22 views

PT-2026-1115

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A flaw exists in code-projects Online Music Site 1.0 that allows for SQL injection. The issue is located in the /Frontend/AlbumByCategory.php file, specifically through manipulation of th...

7.5CVSS7AI score0.00339EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.15 views

code-projects Content Management System SQL注入漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter Value in the file search.php, which...

9.8CVSS7.7AI score0.00414EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.12 views

PT-2026-1112

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that allows for SQL injection. The issue is located in the /pages.php file, specifically through manipulation of the ID...

7.5CVSS6.9AI score0.00339EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.19 views

PT-2026-1107

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A security issue exists in code-projects Content Management System. The manipulation of the image argument in a file, /admin/edit posts.php, allows for unrestricted file upload...

5.8CVSS6.2AI score0.00311EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.9 views

Code-Projects Content Management System SQL注入漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A SQL injection vulnerability exists in code-projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter del in the file /admin/delete.php, which...

9.8CVSS7.1AI score0.00339EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.10 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from incorrect manipulation of the parameter ID in the file /Frontend/ViewSongs.php, which could lead to a SQL...

9.8CVSS7.6AI score0.00339EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.8 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /Frontend/Feedback.php, which could lead to a SQ...

9.8CVSS7.6AI score0.00399EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.19 views

PT-2026-1066

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that involves the processing of the /admin/delete.php file. Manipulation of the del argument within this file can lead to...

7.5CVSS6.9AI score0.00339EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.18 views

PT-2026-1061

Name of the Vulnerable Software and Affected Versions code-projects Content Management System version 1.0 Description A flaw exists in code-projects Content Management System that allows for SQL injection. The issue is located in the search.php file and involves manipulation of the Value argument...

7.5CVSS6.9AI score0.00414EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.14 views

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is a Code-Projects open source content and management system. A code issue vulnerability exists in Code-Projects Content Management System version 1.0, which stems from an incorrect manipulation of the parameter image in the file /admin/editposts.php, which...

9.8CVSS5.2AI score0.00311EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/01 7:15 p.m.9 views

CVE-2025-15410

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Lemail leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available a...

9.8CVSS0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 7:2 p.m.27 views

CVE-2025-15410

Code-Projects Online Guitar Store 1.0 is affected by a SQL injection in login.php via the L_email parameter. Multiple sources (NVD, Red Hat, CVE listings, and PT Security) confirm remote exploitation and that a public exploit exists. The vulnerability stems from improper handling of input in /log...

9.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/01 7:2 p.m.39 views

CVE-2025-15410 code-projects Online Guitar Store login.php sql injection

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Lemail leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available a...

7.5CVSS0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/01 6:32 p.m.41 views

CVE-2025-15409 code-projects Online Guitar Store Delete_product.php sql injection

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Deleteproduct.php. Executing a manipulation of the argument delpro can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00394EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 6:32 p.m.23 views

CVE-2025-15409

CVE-2025-15409 affects code-projects Online Guitar Store 1.0. The vulnerability is an SQL injection in /admin/Delete_product.php via manipulation of the del_pro parameter, exploitable remotely. Public disclosures exist. Impact includes potential disclosure/integrity/availability harm as per CVSS ...

9.8CVSS7.2AI score0.00394EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/01/01 6:2 p.m.22 views

CVE-2025-15408

CVE-2025-15408 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in /admin/Create_product.php via the dre_title parameter. Exploitation is possible remotely and the exploit has been publicly released. Connected documents confirm the root cause (unsafely processed...

9.8CVSS7.1AI score0.00335EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/01 5:32 p.m.34 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/01 5:32 p.m.6 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS6.8AI score0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 5:32 p.m.19 views

CVE-2025-15407

CVE-2025-15407 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/Create_category.php, triggered by manipulation of the dre_Ctitle parameter. Exploitation could be performed remotely, and public disclosures exist. Multiple...

9.8CVSS7.3AI score0.00335EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder