CVE-2025-53639

MeterSphere is affected by a SQL injection vulnerability in the sortField parameter of certain API endpoints, present in versions prior to 3.6.5-lts. The vulnerability arises from insufficient validation/sanitization of the sortField input, allowing an attacker to inject and execute arbitrary SQL...

CVE-2025-51658

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSInquiryView.php...

CVE-2025-51656

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...

CVE-2025-51659

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSProducts.php...

CVE-2025-51657

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSLink.php...

CVE-2025-51660

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSProducts.php...

CVE-2025-51654

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSInfocategories.php...

CVE-2025-51653

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSct.php...

CVE-2025-7612 code-projects Mobile Shop login.php sql injection

A vulnerability was found in code-projects Mobile Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-7608

A vulnerability, which was classified as critical, was found in code-projects Simple Shopping Cart 1.0. Affected is an unknown function of the file /userlogin.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-7611

CVE-2025-7611 affects code-projects Wedding Reservation 1.0. The vulnerability is a SQL injection in an unknown part of /global.php caused by manipulating the parameter lu, allowing remote attack. The exploit has been publicly disclosed. Sources describe the issue as critical with high impact, an...

CVE-2025-7609 code-projects Simple Shopping Cart register.php sql injection

A vulnerability has been found in code-projects Simple Shopping Cart 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument ruseremail leads to sql injection. The attack can be launched remotely. The...

CVE-2025-7609

CVE-2025-7609 affects Code-Projects Simple Shopping Cart 1.0. The vulnerability is a SQL injection in the /register.php endpoint caused by unsafely handling the ruser_email parameter. Exploitation can be performed remotely and, per connected sources, the exploit has been publicly disclosed. Multi...

CVE-2025-7607

CVE-2025-7607 affects code-projects Simple Shopping Cart 1.0. The vulnerability is an SQL injection in the file /Customers/save_order.php caused by manipulation of the order_price (or order price) parameter, allowing remote exploitation. Public exploit details are indicated in sources, and multip...

CVE-2021-4458

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2025-7595

The CVE-2025-7595 issue affects code-projects Job Diary 1.0 and is a SQL injection in the /view-cad.php file caused by manipulating the ID parameter. It can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate the vulnerability with high-impact metrics (...

CVE-2025-7594

CVE-2025-7594 affects code-projects Job Diary 1.0. The vulnerability is a SQL injection in the /view-emp.php file, caused by unsafely using the idle parameter ID without validation, enabling remote exploitation. Public disclosures indicate an attacker can run arbitrary SQL, with potential data ac...

CVE-2025-7593 code-projects Job Diary view-all.php sql injection

A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-all.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2025-7589

PHPGurukul Dairy Farm Shop Management System 1.3 has a SQL injection vulnerability in edit-company.php via the companyname parameter. The issue allows remote exploitation and has publicly disclosed exploits. Affected component is unknown code within edit-company.php; exploitation can lead to unau...

CVE-2025-7589 PHPGurukul Dairy Farm Shop Management System edit-company.php sql injection

A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file edit-company.php. The manipulation of the argument companyname leads to sql injection. The attack can be initiated remotely. The exploit has be...