EUVD-2025-30750

Malicious code in bioql PyPI...

CVE-2025-10802

A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2025-10802

A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2025-10802: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

PT-2021-23756

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Shopping System PHP version 1.0 Description A CSRF issue in the cart remove.php file allows a remote attacker to remove any product from a customer's cart. Recommendations For ProjectWorlds Online Shopping System PHP versi...

PT-2021-23755

Name of the Vulnerable Software and Affected Versions Projectsworlds Online Shopping System PHP version 1.0 Description The issue concerns SQL injection via the id parameter in the "cart remove.php" file. This allows for potential manipulation of database queries. Recommendations For Projectsworl...

PT-2013-4579

Name of the Vulnerable Software and Affected Versions Feedweb plugin versions prior to 1.9 Description A cross-site scripting issue exists, allowing remote authenticated administrators to inject arbitrary web script or HTML. This is achieved via the wp post id parameter in the widget remove.php...

CVE-2009-4805: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...

CVE-2009-3209

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-3209

CVE-2009-3209 is a SQL injection in remove.php of PHP eMail Manager 3.3.0, exploitable via the ID parameter to execute arbitrary SQL commands. Documented by NVD with a CVSS v2 base score of 7.5 (HIGH) and network access with no authentication. Connected documents do not provide a patch or remedia...

CVE-2009-3209: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...