19 matches found
CVE-2025-14203
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...
EUVD-2025-201613
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...
CVE-2025-14203
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...
CVE-2025-14203 code-projects Question Paper Generator selectquestionuser.php sql injection
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...
CVE-2025-14203
CVE-2025-14203 affects Code-Projects Question Paper Generator up to version 1.0, with the vulnerability residing in the file /selectquestionuser.php. The root cause is improper handling/manipulation of the subid parameter, enabling SQL injection. This flaw allows remote exploitation, and an explo...
PT-2025-49417
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...
Code-Projects Question Paper Generator SQL注入漏洞
Code-Projects Question Paper Generator is a Code-Projects open source question paper generation software. Code-Projects Question Paper Generator 1.0 and earlier versions have a SQL injection vulnerability that stems from improper handling of the parameter subid in the file /selectquestionuser.php...
EUVD-2007-0183
Malware in sbrugna...
CVE-2024-9009
A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been...
Code-Projects Online Quiz Site SQL注入漏洞
Code-Projects Online Quiz Site is a Code-Projects open source online quiz site. A SQL injection vulnerability exists in Code-Projects Online Quiz Site version 1.0, which stems from the parameter subid in the file showtest.php that causes SQL injection...
PT-2024-39364 · Unknown · Code-Projects Online Quiz Site
Name of the Vulnerable Software and Affected Versions: code-projects Online Quiz Site version 1.0 Description: A critical issue has been found in the code-projects Online Quiz Site, affecting the file showtest.php. The manipulation of the subid argument leads to SQL injection. The attack can be...
shadow-utils security and bug fix update
2:4.6-19 - gpasswd: fix password leak. Resolves: 2215947 2:4.6-18 - Update patch to close label to reset libselinux state. Resolves: 1984740 - useradd: check if subid range exists for user. Resolves: 2012929 - findnewguid: Skip over IDs that are reserved for legacy reasons. Resolves: 1994269...
shadow-utils security and bug fix update
2:4.9-8 - gpasswd: fix password leak. Resolves: 2215948 2:4.9-7 - useradd: check if subid range exists for user. Resolves: 2179987 - findnewguid: Skip over IDs that are reserved for legacy reasons. Resolves: 2179988...
Instant v2.0 SQL Injection Vulnerability
A SQL Injection Vulnerability has been discovered in the Instant v.2.0 CMS. The Vulnerability is located in the subid Value of the productcat.php File. Attackers are able to execute own SQL commands by usage of a GET Method Request with manipulated subid Value. Attackers are able to read Database...
FlipViewer FlipViewerX.dll ActiveX控件多个栈溢出漏洞
FlipViewer是用于阅读FlipBooks电子书的阅读器。 FlipViewer的ActiveX控件实现上存在缓冲区溢出漏洞,远程攻击者可能利用控制用户机器。 FlipViewer的FlipViewerX.dll库所提供的FViewerLoading ActiveX控件在处理UID、Opf、PAGENO、LaunchMode、SubID、BookID、LibraryID、SubURL和LoadOpf属性时存在多个栈溢出漏洞。如果用户受骗访问了恶意站点并向这些属性传送了超长参数的话,就可能触发溢出,导致执行任意指令。 E-Book Systems FlipViewer 4.0...
Sql injection
SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parameter...
PT-2006-6622 · Infinicart · Infinicart
Name of the Vulnerable Software and Affected Versions: INFINICART affected versions not specified Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is possible via several parameters in different ASP files,...
CVE-2006-3156
Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...
CVE-2006-3156
Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...