16798 matches found
CVE-2025-8338 projectworlds Online Admission System adminac.php sql injection
A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /adminac.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-8336
Campcodes Online Recruitment Management System 1.0 contains a SQL injection in the /admin/ajax.php?action=save_user endpoint, caused by manipulation of the ID parameter. The vulnerability can be exploited remotely, and public exploit information exists per the CVE records. Connected sources also ...
CVE-2025-8333 code-projects Online Farm System categoryvalue.php sql injection
A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /categoryvalue.php. The manipulation of the argument Value leads to sql injection. The attack can be launched remotely. The...
CVE-2025-8331
CVE-2025-8331 affects code-projects Online Farm System 1.0. The vulnerability is in the /forgot_pass.php handling of the email parameter, where unsafely processed input enables SQL injection. The issue is exploitable remotely and is described as critical by the primary sources; multiple connected...
CVE-2025-8331 code-projects Online Farm System forgot_pass.php sql injection
A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgotpass.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...
CVE-2025-8329 code-projects Vehicle Management filter3.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the file /filter3.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-8328 code-projects Exam Form Submission register.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument USN leads to sql injection. The attack may be launched remotely. The exploi...
CVE-2025-8328 code-projects Exam Form Submission register.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument USN leads to sql injection. The attack may be launched remotely. The exploi...
CVE-2025-8327 code-projects Exam Form Submission delete_s8.php sql injection
A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletes8.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...
CVE-2025-8327 code-projects Exam Form Submission delete_s8.php sql injection
A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletes8.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...
CVE-2025-8326 code-projects Exam Form Submission delete_s7.php sql injection
A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/deletes7.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...
CVE-2025-6918
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...
CVE-2025-6348
The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2025-6348
CVE-2025-6348 affects WordPress Smart Slider 3 plugin. All versions up to and including 3.5.1.28 are vulnerable to a time-based SQL Injection via the sliderid parameter, caused by insufficient escaping of user input and inadequate preparation of the existing SQL query. This allows authenticated a...
CVE-2024-45955
Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...
PT-2025-31457 · Projectworlds · Projectworlds Online Admission System
Name of the Vulnerable Software and Affected Versions: projectworlds Online Admission System version 1.0 Description: A critical issue exists in projectworlds Online Admission System that allows for remote SQL injection. The vulnerability is located in an unknown functionality within the...
CVE-2025-8247
A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The manipulation of the argument markof leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed t...
WordPress Smart Slider 3 plugin <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter vulnerability
Authenticated Administrator+ SQL Injection via sliderid Parameter vulnerability discovered by Chive in WordPress Plugin Smart Slider 3 versions = 3.5.1.28...
Bacula-web SQL Injection Vulnerability
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...