16798 matches found
CVE-2025-6822 code-projects Inventory Management System removeProduct.php sql injection
A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely...
CVE-2025-6821
Code-projects Inventory Management System 1.0 contains a SQL injection in /php_action/createOrder.php due to insufficient input filtering. The vulnerability allows remote exploitation and is publicly disclosed; multiple sources corroborate manipulation of the database and potential data exposure....
CVE-2025-6820 code-projects Inventory Management System createProduct.php sql injection
A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /phpaction/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched...
CVE-2025-51671
A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file...
CVE-2025-51672
A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request...
PT-2025-27319 · Code Projects · Code-Projects Inventory Management System
Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Inventory Management System, affecting an unknown functionality of the file /php action/removeBrand.php. The...
PT-2025-28161 · Itsourcecode · Sourcecodester Employee Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System versions up to 1.0 Description: A critical issue has been found in the itsourcecode Employee Management System. The problem affects some unknown functionality of the file /admin/adminprofile.php. The...
PT-2025-27332 · Code Projects · Code-Projects Inventory Management System
Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Inventory Management System, affecting unknown code of the file /orders.php. The manipulation of the argument i...
PT-2025-27304 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A SQL injection issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: At the...
CVE-2025-6665
A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...
CVE-2025-6777
CVE-2025-6777 affects code-projects Food Distributor Site 1.0. The vulnerability is a SQL injection in the login pathway triggered by manipulating the username/password passed to /admin/process_login.php. Exploitation can be remote and, per sources, the exploit has been disclosed publicly. Some c...
CVE-2025-6777 code-projects Food Distributor Site process_login.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue affects some unknown processing of the file /admin/processlogin.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated...
CVE-2024-12150
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection. This issue affects Wowwo CRM. NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will...
CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection.This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...
CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...
CVE-2024-11739
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...
CVE-2024-12364
CVE-2024-12364 covers an SQL Injection in Mavi Yeşil Software’s Guest Tracking Software. The vulnerability arises from improper neutralization of special elements in SQL commands within the Guest Tracking Software’s components, enabling remote exploitation with network access and no privileges re...
CVE-2025-53091 WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated...
CVE-2025-53091
WeGIA is vulnerable to an unauthenticated Time-Based Blind SQL Injection in the almox parameter of the /controle/getProdutosPorAlmox.php endpoint (WeGIA version 3.3.3). The issue, caused by lack of input validation, allows an attacker to inject arbitrary SQL queries and potentially access or exfi...
