Lucene search
+L

2406 matches found

Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.7 views

PT-2025-47138

Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...

7.5CVSS7.5AI score0.00295EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.9 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.9AI score0.00406EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.12 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of an externally entered SQL statement in the username parameter of the admin page. An attacker can exploit this vulnerability to execute illegal SQL comman...

6.5CVSS8.2AI score0.00235EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.19 views

PT-2025-47146

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the Username parameter within an unknown function of the /login.php...

9.8CVSS6.9AI score0.00406EPSS
SaveExploits1References12
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.11 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

0.00235EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/16 4:50 p.m.13 views

CVE-2025-13201

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly availab...

9.8CVSS7AI score0.0045EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/16 9:30 a.m.8 views

EUVD-2025-197722

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS7.2AI score0.00425EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/16 7:2 a.m.25 views

CVE-2025-13241

The CVE concerns code-projects Student Information System 2.0, where the vulnerability resides in the /index.php file. The Username parameter can be manipulated to achieve SQL injection, allowing remote execution. The issue is supported by multiple sources (NVD, Red Hat, CNVD, CNNVD, EUVD, VulnDB...

9.8CVSS6.8AI score0.00425EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/16 7:2 a.m.13 views

CVE-2025-13241 code-projects Student Information System index.php sql injection

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS0.00425EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/16 6:31 a.m.7 views

EUVD-2025-197718

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

7.5CVSS6.5AI score0.00374EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/16 5:16 a.m.6 views

CVE-2025-13237

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

9.8CVSS0.00374EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 5:2 a.m.3 views

CVE-2025-13237 itsourcecode Inventory Management System LogSignModal.PHP sql injection

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

7.5CVSS7.3AI score0.00374EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/16 5:2 a.m.15 views

CVE-2025-13237 itsourcecode Inventory Management System LogSignModal.PHP sql injection

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument UUSERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public...

7.5CVSS0.00374EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/16 12:0 a.m.6 views

PT-2025-47072

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A security flaw exists in itsourcecode Inventory Management System 1.0. The issue involves a SQL injection that can be triggered by manipulating the U USERNAME argument within an...

9.8CVSS7.5AI score0.00374EPSS
SaveExploits1References12
OSV
OSV
added 2025/11/15 4:15 p.m.6 views

CVE-2025-13201

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly availab...

9.8CVSS5.8AI score0.0045EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/15 4:2 p.m.22 views

CVE-2025-13201

The CVE-2025-13201 entry concerns Code-projects’ Simple Cafe Ordering System 1.0. A SQL injection vulnerability exists in the login.php file, arising from improper handling of the Username parameter. The issue can be exploited remotely, and an exploit is publicly available. Affected component: lo...

9.8CVSS7.2AI score0.0045EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/15 10:32 a.m.19 views

CVE-2025-13199 code-projects Email Logging Interface signup.cpp path traversal

A vulnerability was found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file signup.cpp. The manipulation of the argument Username results in path traversal: '../filedir'. The attack is only possible with local access. The exploit has been made public and...

5.3CVSS0.00246EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/11/12 11:2 p.m.14 views

CVE-2025-13076 code-projects Responsive Hotel Site usersetting.php sql injection

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...

5.8CVSS0.00373EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/11/11 3:47 a.m.10 views

CVE-2025-12928

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and ma...

9.8CVSS7.3AI score0.00431EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/10 4:15 a.m.5 views

CVE-2025-12928

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and ma...

9.8CVSS5.7AI score0.00431EPSS
SaveExploits1References6
Rows per page
Query Builder