Lucene search
+L

15637 matches found

Vulnrichment
Vulnrichment
•added 2025/09/28 1:02 p.m.•6 views

CVE-2025-11105 code-projects Simple Scheduling System addsubject.php sql injection

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

7.5CVSS7AI score0.00417EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•18 views

Code-Projects Simple Scheduling System SQL Injection Vulnerability

Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addfaculty.php file not securely filtering the falname parameter. No details of the vulnerability are provided at this time...

9.8CVSS7.2AI score0.00417EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•19 views

Code-Projects Simple Scheduling System SQL Injection Vulnerability

Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addcourse.php file not securely filtering the corcode parameter, no details of the vulnerability are available at this time...

9.8CVSS7.2AI score0.00417EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•20 views

PT-2025-39773

Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description A flaw exists in code-projects Simple Scheduling System 1.0, specifically within the /schedulingsystem/addsubject.php file. Manipulation of the subcode argument can lead to SQL...

9.8CVSS7AI score0.00417EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•18 views

Code-Projects Simple Scheduling System SQL Injection Vulnerability

Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addsubject.php file not securely filtering the subcode parameter. No details of the vulnerability are available at this time...

9.8CVSS7.2AI score0.00417EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•20 views

PT-2025-39787

Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description A flaw exists in code-projects Simple Scheduling System 1.0, specifically within the /add.home.php file. Manipulation of the faculty argument can lead to SQL injection. This issue ...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•26 views

PT-2025-39786

Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A flaw exists in an unknown functionality within the /addtime.php file. The manipulation of the starttime/endtime argument can lead to a SQL injection. Remote exploitation is possible. The explo...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•5 views

CVE-2025-11105: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

9.8CVSS7AI score0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•7 views

CVE-2025-11106: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•5 views

CVE-2025-11108: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

9.8CVSS7AI score0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•9 views

CVE-2025-11107: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•8 views

CVE-2025-11115: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS7AI score0.00478EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•11 views

CVE-2025-11116: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Other...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•22 views

PT-2025-39774

Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A SQL injection issue exists in Simple Scheduling System version 1.0. The issue affects unknown code within the /schedulingsystem/addfaculty.php file. Manipulation of the falname argument can le...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•26 views

PT-2025-39776

Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A flaw exists in Simple Scheduling System 1.0 that could allow for SQL injection. The issue is located in the /schedulingsystem/addroom.php file, specifically through manipulation of the room...

9.8CVSS7.1AI score0.00417EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/09/27 8:44 a.m.•12 views

CVE-2025-60124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/27 8:44 a.m.•14 views

CVE-2025-60142

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/26 4:15 p.m.•15 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

4CVSS0.00408EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2025/09/26 9:58 a.m.•14 views

WordPress Simple Meta Tags Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Simple Meta Tags versions = 1.5...

6.5CVSS6AI score0.00215EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/09/26 9:54 a.m.•11 views

WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Simple Colorbox versions = 1.6.1...

6.5CVSS6AI score0.00215EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder