CVE-2025-51660

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSProducts.php...

CVE-2025-51652

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSCategories.php...

PT-2025-29448 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0, affecting an unknown functionality within the /view-all.php file. Manipulation of the ID argument results in a SQL injection. The attack...

PT-2025-29464 · Avl Rooms · Avl Rooms

Name of the Vulnerable Software and Affected Versions: AVL Rooms version 1.0 Description: A critical issue exists in AVL Rooms that allows for SQL injection. The vulnerability is located in the /city.php file, where manipulation of the city argument can trigger the attack remotely. The exploit fo...

CVE-2025-51655

CVE-2025-51655 relates to SemCms v5.0, with a SQL injection vulnerability exposed via the pid parameter in SEMCMS_Quanxian.php. The issue is documented across multiple sources (NVD/Red Hat/CVE list) with a CVSS v3.1 base score of 5.4 (MEDIUM) and attack vector NETWORK, low complexity, low privile...

CVE-2025-51652

Summary: CVE-2025-51652 affects SemCms v5.0, where a SQL injection can be triggered via the pid parameter in SEMCMS_Categories.php. The vulnerability is confirmed across multiple sources (NVD, Red Hat, CVE list, PT Security, CNNVD, etc.). Impact: confidentiality and integrity impacts are listed a...

CVE-2025-51659

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSProducts.php...

PT-2025-29440 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0. The vulnerability is due to a SQL injection flaw within an unknown functionality of the...

CVE-2025-51653

CVE-2025-51653 affects SemCms v5.0, where a SQL injection is possible through the pid parameter in SEMCMS_ct.php. The issue, described across multiple feeds (NVD, Red Hat, CVE listing, and PT Security), has a CVSS v3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, ...

CVE-2025-51658

SemCms v5.0 contains a SQL injection vulnerability via the ID parameter in SEMCMS_InquiryView.php. Affected component: SemCms (PHP CMS). Root cause: unsafely interpolated ID parameter in a query, enabling unauthorized access or data exposure. CVSS base score 5.4 (Medium) with network attack vecto...

PT-2025-29466 · Unknown · Simple Php Shopping Cart

Name of the Vulnerable Software and Affected Versions: Simple Shopping Cart version 1.0 Description: A critical issue exists in the processing of the /Customers/save order.php file. Manipulation of the order price argument can lead to SQL injection. This issue may be exploited remotely, and detai...

PT-2025-29470 · Code Projects · Electricity Billing System

Name of the Vulnerable Software and Affected Versions: code-projects Electricity Billing System version 1.0 Description: A critical issue exists in code-projects Electricity Billing System version 1.0. The vulnerability is due to a SQL injection flaw within the /user/change password.php file...

CVE-2025-51660

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSProducts.php...

CVE-2025-51655

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...

PT-2025-29499 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection vulnerability through the ID parameter at the SEMCMS Products.php endpoint. Recommendations: As a mitigation, sanitize or validate the ID parameter at the SEMCMS...

CVE-2025-51655

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...

CVE-2025-51659

SemCms v5.0 is affected by a SQL injection vulnerability via the ID parameter in SEMCMS_Products.php. The CVE entry documents a low-severity issue (CVSS v3.1: 5.4, Confidentiality/Integrity impact L) that could enable unauthorized data access or modification, with no availability impact reported....

CVE-2025-51656

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...

CVE-2025-51656

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...

CVE-2025-51656

CVE-2025-51656 affects SemCms v5.0, with a SQL injection in SEMCMS_Link.php via the ID parameter. Primary impact is unauthorized SQL access, as indicated by public records; exploitation details are not explicitly provided in the initial documents. A temporary remediation found in PT-2025-29496 su...