Lucene search
+L

7461 matches found

Positive Technologies
Positive Technologies
•added 2025/02/12 12:00 a.m.•21 views

PT-2025-6471 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A problem has been found in the code that affects the / parse/load user-profile.php file, leading to cross site scripting. The attack can be initiated remotely and multiple parameters mig...

6.4CVSS4.2AI score0.00356EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•9 views

CVE-2025-1189: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

8.8CVSS5.5AI score0.00465EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•6 views

CVE-2025-1208: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /Profile.php. The manipulation of the argument postcontent leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.4CVSS3.9AI score0.0034EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/11 5:15 a.m.•27 views

CVE-2025-1173

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

7.2CVSS0.00674EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/02/11 3:31 a.m.•30 views

CVE-2025-1171 code-projects Real Estate Property Management System CustomerReport.php cross site scripting

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

5.1CVSS3.8AI score0.00418EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/02/11 3:00 a.m.•56 views

CVE-2025-1170 code-projects Real Estate Property Management System Category.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/Category.php. The manipulation of the argument Desc leads to cross site scripting. It is possible to launch the attack remotely...

5.1CVSS0.00398EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•16 views

Code-Projects Real Estate Property Management System 跨站脚本漏洞

Code-Projects Real Estate Property Management System is a Code-Projects open source real estate property management system. A cross-site scripting vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which stems from the parameter Address in the file...

6.1CVSS4.3AI score0.00418EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•8 views

CVE-2025-1172: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...

8.8CVSS5.5AI score0.00545EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•5 views

CVE-2025-1170: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/Category.php. The manipulation of the argument Desc leads to cross site scripting. It is possible to launch the attack remotely...

5.4CVSS4AI score0.00398EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•24 views

1000 Projects Bookstore Management System 代码注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A code injection vulnerability exists in version 1.0 of 1000 Projects Bookstore Management System, which stems from the parameter Book Name in the file processbookadd.php and can lead to...

4.8CVSS4.2AI score0.00513EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•12 views

CVE-2025-1173: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

7.2CVSS5.6AI score0.00674EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•8 views

CVE-2025-1174: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...

4.8CVSS3.8AI score0.00513EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•5 views

PT-2025-6149

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A problematic vulnerability was found in the code-projects Real Estate Property Management System. The vulnerability affects an unknown functionality of the file...

6.1CVSS0.00418EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•9 views

CVE-2025-1171: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can...

6.1CVSS3.9AI score0.00418EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•4 views

PT-2025-6144

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A problematic issue has been discovered, affecting an unknown function of the file /Admin/Category.php. The manipulation of the Desc argument leads to cross-site...

5.4CVSS0.00398EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2025/02/10 11:15 p.m.•23 views

CVE-2025-1162

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /\parse/load\user-profile.php. The manipulation of the argument userhash leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

7.5CVSS6.4AI score0.00588EPSS
SaveExploits1References5
NVD
NVD
•added 2025/02/10 11:15 p.m.•40 views

CVE-2025-1162

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /\parse/load\user-profile.php. The manipulation of the argument userhash leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

7.5CVSS0.00588EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/02/10 2:24 p.m.•24 views

CVE-2025-0961

A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /parse/loadjob-details.php. The manipulation of the argument businessstreamname/companywebsiteurl leads to cross site...

5.4CVSS6.1AI score0.00417EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/10 12:00 a.m.•20 views

PT-2025-6117 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical issue has been found in code-projects Job Recruitment. The manipulation of the userhash argument leads to SQL injection. It is possible to initiate the attack remotely. The iss...

7.5CVSS7.3AI score0.00588EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/02/10 12:00 a.m.•18 views

code-projects Job Recruitment 安全漏洞

Code-Projects Job Recruitment is a job portal from Code-Projects open source. A security vulnerability exists in code-projects Job Recruitment version 1.0, which stems from an incorrect manipulation of the parameter userhash that can lead to SQL injection...

7.5CVSS6.7AI score0.00588EPSS
SaveExploits1References2
Rows per page
Query Builder