Lucene search
+L

748 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•1 views

CVE-2025-13253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS5.6AI score0.00351EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/16 11:32 p.m.•29 views

CVE-2025-13253

CVE-2025-13253 affects projectworlds Advanced Library Management System 1.0. A SQL injection vulnerability exists in the /add_librarian.php file due to manipulation of the Username parameter. This can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate ...

8.8CVSS6.6AI score0.00351EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 11:32 p.m.•6 views

CVE-2025-13253 projectworlds Advanced Library Management System add_librarian.php sql injection

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS6.3AI score0.00351EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 11:32 p.m.•28 views

CVE-2025-13253 projectworlds Advanced Library Management System add_librarian.php sql injection

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS0.00351EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/10 12:15 p.m.•12 views

CVE-2025-12938

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

9.8CVSS5.8AI score0.00427EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/11/10 12:02 p.m.•16 views

EUVD-2025-44044

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.6AI score0.00427EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/10 12:02 p.m.•32 views

CVE-2025-12938

Summary: CVE-2025-12938 affects projectworlds Online Admission System 1.0. Affected component: file /process_login.php, where manipulation of the keywords parameter enables a SQL injection. The vulnerability is remote, with a publicly available exploit noted in the sources. Multiple feeds corrobo...

9.8CVSS6.8AI score0.00427EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•20 views

PT-2025-46140

Name of the Vulnerable Software and Affected Versions projectworlds Online Admission System version 1.0 Description A security issue exists in projectworlds Online Admission System version 1.0. The issue involves a SQL injection that can be triggered remotely through manipulation of the keywords...

7.5CVSS7.2AI score0.00427EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/11/10 12:00 a.m.•16 views

Projectworlds Online Admission System SQL注入漏洞

Projectworlds Online Admission System is an online admission system from Projectworlds India. Projectworlds Online Admission System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter keywords in the file /processlogin.php, which could le...

9.8CVSS7.8AI score0.00427EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•1 views

CVE-2025-12938: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

9.8CVSS5.7AI score0.00427EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/08 4:54 p.m.•29 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS6.6AI score0.00364EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/07 6:30 p.m.•15 views

EUVD-2025-38264

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

6.5CVSS6.3AI score0.00364EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/07 5:15 p.m.•47 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS0.00364EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/07 4:32 p.m.•47 views

CVE-2025-12862

CVE-2025-12862 affects projectworlds Online Notes Sharing Platform 1.0. The vulnerability is in the file /dashboard/userprofile.php where manipulation of the image argument enables unrestricted file uploads. The issue is exploitable remotely and an exploit is publicly available. Multiple connecte...

9.8CVSS6.3AI score0.00364EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2025/11/07 4:32 p.m.•6 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS6.3AI score0.00364EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/07 4:32 p.m.•6 views

CVE-2025-12862 projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

6.5CVSS6.3AI score0.00364EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/07 4:32 p.m.•28 views

CVE-2025-12862 projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

6.5CVSS0.00364EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•0 views

CVE-2025-12862: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS5.5AI score0.00364EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•16 views

Projectworlds Online Notes Sharing Platform 安全漏洞

Projectworlds Online Notes Sharing Platform is an online notes sharing platform from Projectworlds India. A security vulnerability exists in Projectworlds Online Notes Sharing Platform version 1.0, which stems from an incorrect manipulation of the parameter image in the file...

9.8CVSS6.5AI score0.00364EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•26 views

CVE-2025-12229

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS2.9AI score0.00239EPSS
SaveExploits1References1
Rows per page
Query Builder