10 matches found
CVE-2025-60736
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...
CVE-2025-60736
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...
CVE-2025-60736
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...
CVE-2025-60736
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...
PT-2025-48740
Name of the Vulnerable Software and Affected Versions code-projects Online Medicine Guide version 1.0 Description The software is susceptible to a SQL Injection issue through the /login.php endpoint. The upass parameter is the entry point for this flaw. Recommendations Apply input validation and...
CVE-2025-60736: Improper Neutralization of Special Elements used in an SQL Command
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...
Code-Projects Online Medicine Guide 安全漏洞
Code-Projects Online Medicine Guide is an online medicine guide from Code-Projects open source. A security vulnerability exists in version 1.0 of code-projects Online Medicine Guide, which stems from the upass parameter in /login.php being susceptible to SQL injection attacks...
CVE-2025-60736
code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter...
CVE-2025-60736
The Online Medicine Guide v1.0 by Code Projects is vulnerable to a CRITICAL SQL Injection flaw in the /login.php file. The root cause is the direct concatenation of the upass POST parameter into SQL queries without proper validation, sanitization, or the use of prepared statements . This allows a...
