CVE-2018-25196

CVE-2018-25196 affects ServerZilla 1.0 via an SQL injection in the email parameter of reset.php. The vulnerability allows unauthenticated, network-based attackers to manipulate queries and potentially exfiltrate data, with the impact described as Confidentiality High and Integrity Low; Availabili...

CVE-2018-25196: Improper Neutralization of Special Elements used in an SQL Command

ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter. Attackers can send POST requests to reset.php with malicious email values containing SQL operators to bypass authenticati...

ServerZilla SQL Injection Vulnerability

ServerZilla is an FTP file transfer tool developed by ajithkp9895. Version 1.0 of ServerZilla has a SQL injection vulnerability. This vulnerability stems from the email parameter in the reset.php file, which exposes a SQL injection vulnerability. It could allow unverified attackers to bypass...

CVE-2025-11432

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

CVE-2025-11432

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

SourceCodester Online Leave Management System security vulnerabilities

SourceCodester Online Leave Management System is a SourceCodester open source online leave management system. A security vulnerability exists in SourceCodester Online Leave Management System version 1.0, which stems from an incorrect manipulation of the parameter employid in the file /reset.php,...

CVE-2025-11432: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

EUVD-2017-2357

Malware in sbrugna...

EUVD-2024-33698

Malicious code in bioql PyPI...

EUVD-2024-50189

Malicious code in bioql PyPI...

EUVD-2025-23437

Malicious code in bioql PyPI...

CVE-2025-8468

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-8468

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-8468

CVE-2025-8468 affects code-projects Wazifa System 1.0. The vulnerability lies in /controllers/reset.php where manipulating the email parameter enables SQL injection. This can be exploited remotely; public exploit/disclosures exist. Several sources confirm the issue and classify impact as high/cri...

Code-Projects Wazifa System Injection Vulnerabilities

Code-Projects Wazifa System is a Code-Projects open source content management system. An injection vulnerability exists in Code-Projects Wazifa System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter email in the file /controllers/reset.php...

CVE-2025-8468: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-3307

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-3307

CVE-2025-3307 affects code-projects Blood Bank Management System 1.0. A vulnerability exists in the reset.php file where manipulation of the useremail parameter enables SQL injection, exploitable remotely. Public disclosures and multiple sources corroborate an active risk, with CVSS metrics indic...

CVE-2025-3307 code-projects Blood Bank Management System reset.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2025-15085 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue was found in the code-projects Blood Bank Management System. The problem is related to an unknown function of the file /reset.php, where the manipulation of...