Lucene search
+L

8862 matches found

EUVD
EUVD
•added 2025/11/17 9:32 a.m.•21 views

EUVD-2025-197783

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing manipulation of the argument ID results in sql injection. The attack is possible to be...

6.5CVSS6.4AI score0.00308EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2025/11/17 9:32 a.m.•10 views

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

8.8CVSS6.3AI score0.00308EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/17 8:32 a.m.•14 views

CVE-2025-13271 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/17 8:16 a.m.•19 views

CVE-2025-13270

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

8.8CVSS5.7AI score0.00308EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/17 3:30 a.m.•23 views

EUVD-2025-197737

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /booksearch.php. Performing manipulation of the argument bookpub/booktitle results in sql injection. It is possible to initiate the attack remotely...

6.5CVSS6.6AI score0.00388EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2025/11/17 1:02 a.m.•12 views

CVE-2025-13256

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a manipulation of the argument rollnumber can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS6.5AI score0.00351EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•23 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•31 views

PT-2025-47104

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A security issue has been identified in itsourcecode Inventory Management System version 1.0. The issue involves a SQL injection vulnerability present in an unknown function with...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•22 views

PT-2025-47138

Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...

7.5CVSS7.5AI score0.00302EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•26 views

PT-2025-47134

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0 that allows for remote SQL injection. The issue is located in the /manage course.php file, specificall...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•20 views

PT-2025-47209

Name of the Vulnerable Software and Affected Versions code-projects Courier Management System version 1.0 Description A flaw exists in code-projects Courier Management System 1.0 that allows for remote code execution. The issue is located in the file /add-new-officer.php. Manipulation of the...

5.8CVSS8.1AI score0.00381EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
•added 2025/11/17 12:00 a.m.•10 views

The vulnerability of the ZenCount visitor counters lies in the lack of protective measures for the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ZenCount visitor counter is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•23 views

PT-2025-47173

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A flaw exists in Campcodes Supplier Management System that allows for SQL injection. This issue affects the /manufacturer/confirm order.php file. Manipulation of the ID argument can...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•12 views

PT-2025-47582

Name of the Vulnerable Software and Affected Versions phpPgAdmin versions 7.13.0 and earlier Description phpPgAdmin versions 7.13.0 and earlier contain a SQL injection issue in the dataexport.php file at line 118. The application directly executes user-supplied SQL queries from the $ REQUEST'quer...

6.8CVSS7.1AI score0.00266EPSS
SaveExploits0References16
CVE
CVE
•added 2025/11/16 11:02 a.m.•43 views

CVE-2025-13248

CVE-2025-13248 affects SourceCodester Patients Waiting Area Queue Management System 1.0. The vulnerability is a SQL injection in an unknown function of the file /php/api_patient_schedule.php caused by manipulating the argument appointmentID . This can be triggered remotely and, per sources, the e...

9.8CVSS7AI score0.00383EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2025/11/16 8:15 a.m.•11 views

CVE-2025-13243

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

8.8CVSS5.7AI score0.00351EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 3:32 a.m.•41 views

CVE-2025-13235

Mode C: This CVE concerns itsourcecode Inventory Management System 1.0. The vulnerability exists in the /admin/login.php file, where manipulating the user_email parameter can trigger SQL injection. It is exploitable remotely and has publicly disclosed exploits. Connected documents corroborate a S...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•18 views

DataX-Web SQL注入漏洞

DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's individual developers. A SQL injection vulnerability exists in DataX-Web 2.1.2 and earlier versions, which stems from a misbehavior of an unknown function and could lead to a SQL injection attack...

8.8CVSS6.8AI score0.00351EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•18 views

Code-Projects Student Information System SQL注入漏洞

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from the /editprofile.php file not effectively filtering user input. No details of the vulnerability are available at this time...

8.8CVSS6.8AI score0.00351EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•13 views

PT-2025-47076

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0 Description A flaw exists in code-projects Student Information System 2.0, affecting unknown code within the /index.php file. Manipulation of the Username argument can lead to SQL injection,...

9.8CVSS7.6AI score0.00435EPSS
SaveExploits1References11
Rows per page
Query Builder