Lucene search
+L

7450 matches found

CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•15 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00435EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•6 views

PT-2025-3769

Name of the Vulnerable Software and Affected Versions code-projects Point of Sales and Inventory Management System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown part of the file /user/plist.php. The manipulation of the cat argument leads to SQ...

6.5CVSS0.00435EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•8 views

CVE-2025-0199: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minuscart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

6.5CVSS5.5AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•8 views

CVE-2025-0176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/addcart.php. The manipulation of the argument id/qty leads to sql injection. The attack may be initiated...

7.5CVSS5.5AI score0.00452EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•4 views

CVE-2025-0175: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

6.1CVSS3.9AI score0.00404EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•7 views

CVE-2025-0174: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/searchresult2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. I...

6.5CVSS5.5AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•5 views

CVE-2025-0196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS5.5AI score0.00435EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•20 views

Code-Projects Point of Sales and Inventory Management System SQL注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00435EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•15 views

Code-Projects Online Shop 跨站脚本漏洞

Code-Projects Online Shop is a Code-Projects open source online store system. A cross-site scripting vulnerability exists in Code-Projects Online Shop version 1.0, which originates from a cross-site scripting vulnerability in the name/details parameter of the /view.php page...

6.1CVSS4.5AI score0.00404EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•23 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00435EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•17 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00435EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•21 views

PT-2025-3764 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop version 1.0 Description: A problem has been found in the code that affects the /view.php file. Manipulating the name/details argument leads to cross site scripting attacks. These attacks can be started from a remote...

6.1CVSS4.3AI score0.00404EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•6 views

CVE-2025-0195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/delproduct.php. The manipulation of the argument id leads to sql injection. The attack may be launch...

6.5CVSS5.5AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/03 12:00 a.m.•7 views

CVE-2025-0197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS5.5AI score0.00435EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/02 4:15 p.m.•19 views

CVE-2025-0172

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

7.5CVSS6.4AI score0.00452EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/02 3:31 p.m.•20 views

CVE-2025-0172 code-projects Chat System deleteroom.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

6.5CVSS7.4AI score0.00452EPSS
SaveExploits1References5
OSV
OSV
•added 2025/01/02 3:15 p.m.•20 views

CVE-2025-0171

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

7.5CVSS5.7AI score0.00452EPSS
SaveExploits1References5
NVD
NVD
•added 2025/01/02 3:15 p.m.•46 views

CVE-2025-0171

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

7.5CVSS0.00452EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/02 3:00 p.m.•79 views

CVE-2025-0171

CVE-2025-0171 affects code-projects Chat System 1.0. A SQL injection exists in the unknown function of /admin/deleteuser.php, exploitable remotely via the id parameter. Multiple sources classify the issue as critical with public disclosures. There is no provided official fixed version in the docu...

7.5CVSS7.6AI score0.00452EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2025/01/02 9:15 a.m.•18 views

CVE-2024-13093

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...

7.5CVSS5.7AI score0.00572EPSS
SaveExploits1References5
Rows per page
Query Builder