16798 matches found
CVE-2025-8372
A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/updates7.php. The manipulation of the argument credits leads to sql injection. The attack may be launched remotely. The exploit h...
CVE-2025-8373 code-projects Vehicle Management print.php sql injection
A vulnerability was found in code-projects Vehicle Management 1.0. It has been classified as critical. This affects an unknown part of the file /print.php. The manipulation of the argument sno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed t...
CVE-2025-8372 code-projects Exam Form Submission update_s7.php sql injection
A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/updates7.php. The manipulation of the argument credits leads to sql injection. The attack may be launched remotely. The exploit h...
CVE-2025-8372
The CVE-2025-8372 entry concerns code-projects Exam Form Submission 1.0. Publicly disclosed SQL injection/scenario stems from the /admin/update_s7.php file, via manipulation of the credits parameter. The root cause is lack of validation/execution safeguards for external SQL statements in credits,...
CVE-2025-8371
A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updates5.php. The manipulation of the argument credits leads to sql injection. The attack can be launched remotely. Th...
CVE-2025-8371 code-projects Exam Form Submission update_s5.php sql injection
A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updates5.php. The manipulation of the argument credits leads to sql injection. The attack can be launched remotely. Th...
CVE-2025-8345 Shanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user sql injection
A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function deleteuser of the file crm/WeiXinApp/yunzhijia/yunzhijiaApi.php. The manipulation of the argument function leads to sql injection...
CVE-2024-43018
Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters maxlevel and minregister. These parameters are used in wsusergerList function from file include\wsfunctions\pwg.users.php and this same function is called by ws.php file at some point can be used for searching users in...
CVE-2025-51970
A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter...
CVE-2025-51044
phpgurukul Nipah virus NiV Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient validation of user input for the " govtissuedid" parameter...
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...
CVE-2025-51045
Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...
CVE-2025-8338
A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /adminac.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...
PT-2025-31502 · Unknown · Campcodes Online Hotel Reservation System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical issue exists in Campcodes Online Hotel Reservation System 1.0, specifically within the Login component. The vulnerability is due to SQL injection, resulting from th...
CVE-2025-50867
A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization...
PT-2025-31543 · Undefined · Undefined
An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel developed by LXCenter prior to version 6.1.12. The flaw resides in the login-name parameter passed to lbin/webcommand.php, which fails to properly sanitize input, allowing an attacker to extract the...
PT-2025-31498 · Code Projects · Vehicle Management
Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Management version 1.0 Description: A critical issue exists in code-projects Vehicle Management 1.0. The manipulation of the company argument in the /updatebal.php file leads to SQL injection. This allows for remote...
PT-2025-31531 · Undefined · Undefined
An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db restore.php endpoint. The flaw allows attackers to inject arbitrary SQL queries into the dates POST parameter, enabling file write via INTO OUTFILE under specific environmental conditions. This can lead to...
PT-2025-31559 · Unknown · Cloudclassroom-Php Project
Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL Injection vulnerability exists in the takeassessment2.php endpoint of CloudClassroom-PHP-Project version 1.0, where the Q5 POST parameter is directly embedded in SQL statements without...