CVE-2025-6868 SourceCodester Simple Company Website manage.php sql injection

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-6868

CVE-2025-6868 affects SourceCodester Simple Company Website 1.0, with a SQL injection in /admin/clients/manage.php via the ID parameter. A remote attacker can exploit this; some sources note PoC/exploitation details. Remediation is not standardized in the provided materials; PT-Security suggests ...

CVE-2025-6868 SourceCodester Simple Company Website manage.php sql injection

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-6867

CVE-2025-6867 affects SourceCodester Simple Company Website 1.0. The issue is a SQL injection in the file /admin/services/manage.php caused by manipulating the argument ID, reported as remotely exploitable with the exploit publicly disclosed. Multiple connected sources corroborate the vulnerabili...

CVE-2025-6866

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forumdownloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been...

CVE-2025-6866

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forumdownloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been...

CVE-2025-6866 code-projects Simple Forum forum_downloadfile.php path traversal

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forumdownloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been...

CVE-2025-6866

CVE-2025-6866 affects code-projects Simple Forum 1.0, specifically the file /forum_downloadfile.php. Multiple connected sources describe a path traversal vulnerability where the attacker can manipulate the filename parameter to read arbitrary files. The vulnerability is exploitable remotely, and ...

CVE-2025-6866 code-projects Simple Forum forum_downloadfile.php path traversal

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forumdownloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been...

CVE-2025-6688

The Simple Payment plugin for WordPress is vulnerable to Authentication Bypass in versions 1.3.6 to 2.3.8. This is due to the plugin not properly verifying a user's identity prior to logging them in through the createuser function. This makes it possible for unauthenticated attackers to log in as...

CVE-2025-6850

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-6850

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-6849

A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forumedit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-6849

A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forumedit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-6850 code-projects Simple Forum forum1.php sql injection

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-6850

The CVE-2025-6850 affects code-projects Simple Forum 1.0, specifically an SQL injection in the /forum1.php file via the File parameter. Multiple connected sources confirm remote exploitation possibilities and that the vulnerability originates from lack of input validation, enabling an attacker to...

CVE-2025-6850 code-projects Simple Forum forum1.php sql injection

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-6849 code-projects Simple Forum forum_edit1.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forumedit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-6849

CVE-2025-6849 affects code-projects Simple Forum 1.0, with an unspecified function in /forum_edit1.php; the vulnerability stems from unsanitized user input in the text parameter, enabling cross-site scripting. Exploitation can be performed remotely and public PoCs/exploits have circulated. Severa...

CVE-2025-6849 code-projects Simple Forum forum_edit1.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forumedit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...