Lucene search
K

6 matches found

CVE
CVE
added 2025/12/08 3:2 p.m.8 views

CVE-2025-14249

CVE-2025-14249 corresponds to code-projects Online Ordering System 1.0 and is tied to a SQL injection in the parameter product_id in /user_school.php. The vulnerability arises from lack of input validation, enabling remote exploitation that may disclose or alter database data. Multiple connected ...

9.8CVSS7.2AI score0.00028EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/12/08 3:2 p.m.4 views

EUVD-2025-201712

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS7.2AI score0.00028EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/08 3:2 p.m.19 views

CVE-2025-14249 code-projects Online Ordering System user_school.php sql injection

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS0.00028EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/08 3:2 p.m.2 views

CVE-2025-14249 code-projects Online Ordering System user_school.php sql injection

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /userschool.php. The manipulation of the argument productid results in sql injection. The attack may be performed from remote. The exploit has been released to...

7.5CVSS6.5AI score0.00028EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

Code-Projects Online Ordering System 安全漏洞

Online Ordering System is an online ordering system. Online Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter productid in the file /userschool.php. An attacker can exploit this...

9.8CVSS7.9AI score0.00028EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49556

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user school.php. The manipulation of the argument product id results in sql injection. The attack may be performed from remote. The exploit has been released t...

7.5CVSS6.9AI score0.00028EPSS
Exploits1References6
Rows per page
Query Builder