SQL Injection Vulnerability in PbootCMS

PbootCMS is the new core and permanent open source free PHP enterprise web development and construction management system. PbootCMS SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

CVE-2025-6489

CVE-2025-6489 affects itsourcecode Agri-Trading Online Shopping System 1.0. A vulnerability in /transactionsave.php allows remote SQL injection via the del parameter. Public exploitation is indicated, with multiple sources confirming the issue and its critical classification. No vendor-provided p...

CVE-2025-6484 code-projects Online Shopping Store action.php sql injection

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

CVE-2025-6483 code-projects Simple Pizza Ordering System edituser.php sql injection

A vulnerability has been found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

CVE-2025-6482 code-projects Simple Pizza Ordering System edituser-exec.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /edituser-exec.php. The manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-6481

CVE-2025-6481 affects code-projects Simple Pizza Ordering System 1.0. The vulnerability exists in the processing of the file /update.php, where manipulating the ID parameter leads to SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Multiple connected source...

CVE-2025-6480 code-projects Simple Pizza Ordering System addcatexec.php sql injection

A vulnerability classified as critical was found in code-projects Simple Pizza Ordering System 1.0. This vulnerability affects unknown code of the file /addcatexec.php. The manipulation of the argument textfield leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-6479

CVE-2025-6479 affects the Simple Pizza Ordering System 1.0, with the vulnerability located in /salesreport.php where the dayfrom parameter is exploited to perform SQL injection remotely. Impact is described as potentially enabling unauthorized data disclosure (high confidentiality/integrity/avail...

CVE-2025-6479 code-projects Simple Pizza Ordering System salesreport.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /salesreport.php. The manipulation of the argument dayfrom leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-6474 code-projects Inventory Management System changeUsername.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2025-6469

A vulnerability was found in code-projects Online Bidding System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...

CVE-2025-6469 code-projects Online Bidding System details.php sql injection

A vulnerability was found in code-projects Online Bidding System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...

CVE-2025-6458 code-projects Online Hotel Reservation System execedituser.php sql injection

A vulnerability has been found in code-projects Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execedituser.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

PT-2025-26559 · Code Projects · Code-Projects Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue has been found in the processing of the file /update.php, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited...

PT-2025-26533 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability has been found in the code-projects Simple Online Hotel Reservation System, affecting an unknown functionality of the file /admin/delete...

PT-2025-26546 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Bidding System version 1.0 Description: A critical issue was found in the code, affecting the /bidnow.php file, where the manipulation of the ID argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-26545 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: code-projects Online Bidding System version 1.0 Description: A critical issue affects an unknown part of the file /login.php. The manipulation of the User argument leads to SQL injection. It is possible to initiate the attack remotely. The...

PT-2025-26536 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System. This issue affects an unknown part of the file /admin/confirm reserve.php. The manipulatio...

PT-2025-26537 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the code-projects Simple Online Hotel Reservation System. This issue affects the file /admin/delete pending.php, where the...

PT-2025-26558 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the code, affecting the /addcatexec.php file. The manipulation of the textfield argument leads to SQL injection. This issue can be initiated...