16798 matches found
CVE-2025-6959 Campcodes Employee Management System eloginwel.php sql injection
A vulnerability classified as critical has been found in Campcodes Employee Management System 1.0. Affected is an unknown function of the file /eloginwel.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...
CVE-2025-6958 Campcodes Employee Management System edit.php sql injection
A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2025-6861
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/addplan.php. The manipulation of the argument planname/description/durationdays/price leads to sql injection. The attack may b...
CVE-2025-6956
CVE-2025-6956 affects Campcodes Employee Management System 1.0. The vulnerability is an SQL injection in the file /changepassemp.php caused by manipulation of the ID parameter, allowing remote exploitation. Multiple sources confirm a critical severity and public exploitation potential. A practica...
CVE-2025-6956 Campcodes Employee Management System changepassemp.php sql injection
A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepassemp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-6955 Campcodes Employee Management System aprocess.php sql injection
A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack may be launched remotely. The explo...
CVE-2025-6938 code-projects Simple Pizza Ordering System editcus.php sql injection
A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editcus.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-6938
CVE-2025-6938 affects code-projects Simple Pizza Ordering System 1.0. The vulnerability arises from SQL injection in the /editcus.php file via the ID parameter, with remote exploitation possible and exploit information publicly disclosed. Several sources describe the issue as critical/high risk d...
PT-2025-27533 · Unknown · Campcodes Employee Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue was found in Campcodes Employee Management System, affecting an unknown part of the file /changepassemp.php. The manipulation of the ID argument leads to SQL...
PT-2025-27490 · Unknown · Code-Projects Simple Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the code-projects Simple Pizza Ordering System. The manipulation of the ID argument leads to SQL injection in the /large.php file. This issue ca...
PT-2025-27502 · Unknown · Code-Projects Simple Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue affects the processing of the file /editcus.php. The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The exploi...
PT-2025-27549 · Campcodes · Campcodes Employee Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue affects the processing of the file /edit.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...
PT-2025-27558 · Unknown · Campcodes Employee Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Employee Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /myprofileup.php. The manipulation of the ID argument leads to SQL injection. It is possible to...
CVE-2025-6935 Campcodes Sales and Inventory System payment_add.php sql injection
A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/paymentadd.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit h...
CVE-2025-6935
CVE-2025-6935 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in the file /pages/payment_add.php, where manipulating the parameter cid leads to SQL injection. Attackers could exploit this remotely, and public disclosures exist. Multiple sources (NVD entry and Red Hat/CVE re...
CVE-2025-6930
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/manage-foreigners-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2025-6929 PHPGurukul Zoo Management System view-normal-ticket.php sql injection
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin/view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotely. The exploit...
CVE-2025-6823
A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated...
CVE-2025-6820
A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /phpaction/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched...
CVE-2025-6917 code-projects Online Hotel Booking registration.php sql injection
A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...