Lucene search
+L

3823 matches found

Positive Technologies
Positive Technologies
added 2025/12/13 12:0 a.m.10 views

PT-2025-51130

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A security flaw exists in code-projects Student File Management System 1.0. The issue affects unknown code within the file /admin/save user.php. Manipulation of the firstname...

7.5CVSS7.4AI score0.00371EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
added 2025/12/12 8:2 p.m.7 views

CVE-2025-14578 itsourcecode Student Management System update_account.php sql injection

A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /updateaccount.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

7.5CVSS6.6AI score0.00346EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/11 8:2 p.m.11 views

EUVD-2025-202874

A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be...

7.5CVSS6.5AI score0.0058EPSS
SaveExploits1References8
OSV
OSV
added 2025/12/11 12:16 p.m.6 views

CVE-2025-14514

A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/adddistributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The exploit has been published and may be...

9.8CVSS5.8AI score0.00371EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/12/10 7:22 p.m.8 views

CVE-2025-14336

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...

9.8CVSS6.9AI score0.00346EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/12/09 7:32 p.m.3 views

CVE-2025-14337 itsourcecode Student Management System new_grade.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /newgrade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS6.7AI score0.00346EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/09 7:15 p.m.6 views

CVE-2025-14335

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00346EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/09 7:15 p.m.7 views

CVE-2025-14334

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newadviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

9.8CVSS0.00346EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/09 7:2 p.m.4 views

CVE-2025-14336 itsourcecode Student Management System promote.php sql injection

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...

7.5CVSS6.8AI score0.00346EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/09 6:32 p.m.34 views

CVE-2025-14334 itsourcecode Student Management System new_adviser.php sql injection

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newadviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

7.5CVSS0.00346EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/09 9:33 a.m.19 views

CVE-2025-14226

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

9.8CVSS7.5AI score0.00346EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/09 7:37 a.m.8 views

CVE-2025-14222

A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /printpersonnelreport.php. This manipulation of the argument perid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

8.8CVSS6.8AI score0.00276EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/09 3:9 a.m.11 views

CVE-2025-14211

A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletebook.php. Performing a manipulation of the argument bookid results in sql injection. The attack may be initiated remotely. The exploi...

9.8CVSS7.3AI score0.00346EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/08 5:16 p.m.14 views

CVE-2025-14256

A vulnerability was detected in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /newcurriculm.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

9.8CVSS5.8AI score0.00432EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/08 5:2 p.m.24 views

CVE-2025-14257

The CVE-2025-14257 issue affects itsourcecode Student Management System 1.0, with the vulnerable component/file being /newrecord.php and the parameter ID. The underlying flaw is a SQL injection caused by manipulating the ID argument, enabling remote exploitation. Exploitation is published and can...

9.8CVSS6.6AI score0.00432EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/08 2:12 p.m.6 views

CVE-2025-14193

A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /viewpersonnel.php. Executing a manipulation of the argument perid can lead to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.4AI score0.00343EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/08 1:11 p.m.18 views

CVE-2025-14190

A flaw has been found in Chanjet TPlus up to 20251121. Affected by this vulnerability is an unknown functionality of the file /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx?method=Load. This manipulation of the argument currentAccId causes sql injection. It is...

7.5CVSS6.7AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/08 10:16 a.m.8 views

CVE-2025-14227

A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...

9.8CVSS0.00303EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/08 10:16 a.m.8 views

CVE-2025-14226

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

9.8CVSS0.00346EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/08 10:16 a.m.14 views

CVE-2025-14226

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

9.8CVSS5.8AI score0.00346EPSS
SaveExploits1References5
Rows per page
Query Builder