Lucene search
K

13 matches found

Vulnrichment
Vulnrichment
added 2025/12/11 6:32 p.m.0 views

CVE-2025-14531 code-projects Rental Management System Log Transaction.java crlf injection

A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made public and could ...

5.3CVSS4.8AI score0.00035EPSS
Exploits1References5
OSV
OSV
added 2025/10/08 4:16 a.m.1 views

CVE-2025-11431

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.7AI score0.00043EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 4:2 a.m.1 views

CVE-2025-11431 code-projects Web-Based Inventory and POS System transaction.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS6.6AI score0.00043EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-42827

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00223EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

itsourcecode Online Clinic Management System SQL注入漏洞

itsourcecode Online Clinic Management System is a itsourcecode open source online clinic management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Clinic Management System, which stems from an incorrect manipulation of the parameter firstname in the file...

8.8CVSS6.9AI score0.00058EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/09/03 9:30 p.m.2 views

CVE-2025-9794

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/postransac.php?action=add. Executing manipulation of the argument cash/firstname can lead to sql injection. The attack may be performed from remote. The explo...

9.8CVSS7.1AI score0.00087EPSS
Exploits1References1
OSV
OSV
added 2025/06/20 6:15 a.m.3 views

CVE-2025-6312

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cashtransaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.1 views

PrestaShop EuroInformation MoneticoPaiement 安全漏洞

PrestaShop EuroInformation MoneticoPaiement is a plugin from PrestaShop France for integrating Monetico/CIC/Créditxa0Mutuel payment gateway into PrestaShop. A security vulnerability exists in PrestaShop EuroInformation MoneticoPaiement versions prior to 1.1.1 that stems from the parameters TPE,...

5.4CVSS7.6AI score0.00139EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 2:33 a.m.3 views

CVE-2023-1351

A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file custtransac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.9AI score0.00306EPSS
Exploits1References1
CVE
CVE
added 2025/05/15 8:31 p.m.30 views

CVE-2025-4719

CVE-2025-4719 affects Campcodes Sales and Inventory System v1.0. The flaw is in /pages/cash_transaction.php where manipulating the cid parameter enables SQL injection. Exploitation can be remote; public exploits exist. Documentation shows critical impact, but remediation details (official patch) ...

9.8CVSS7.5AI score0.00277EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/05/15 6:15 p.m.1 views

CVE-2025-4710

A vulnerability, which was classified as critical, has been found in Campcodes Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/transaction.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely...

9.8CVSS5.7AI score
Exploits0References5
OSV
OSV
added 2023/03/11 12:15 p.m.1 views

CVE-2023-1351

A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file custtransac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.5AI score0.00306EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/03/11 12:0 a.m.2 views

Computer Parts Sales and Inventory System SQL注入漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. SourceCodester Computer Parts Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from a security issue in the file...

9.8CVSS7.2AI score0.00306EPSS
Exploits1References4
Rows per page
Query Builder