1306 matches found
CVE-2025-7461 code-projects Modern Bag action.php sql injection
A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument proId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to...
CVE-2025-7461
CVE-2025-7461 affects code-projects Modern Bag 1.0, specifically the file /action.php. The vulnerability arises from improper validation of the proId parameter, enabling SQL injection and potentially allowing remote exploitation. Multiple connected sources confirm this SQLi in an unknown/unspecif...
PT-2025-29351 · Unknown · Modern Bag
Name of the Vulnerable Software and Affected Versions: Modern Bag version 1.0 Description: A critical vulnerability exists due to a SQL injection flaw in the /admin/product-update.php file. The idProduct argument is susceptible to manipulation, potentially allowing for remote attacks. The exploit...
PT-2025-29345 · Phpgurukul · Phpgurukul Vehicle Parking Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue exists in the processing of the /admin/search-vehicle.php file. Manipulation of the searchdata argument can lead to a SQL injection. The attack can be...
PT-2025-29323 · Unknown · Modern Bag
Name of the Vulnerable Software and Affected Versions: code-projects Modern Bag version 1.0 Description: A vulnerability exists in code-projects Modern Bag 1.0. This issue is a SQL injection affecting an unknown functionality of the /admin/login-back.php file. Manipulation of the user-name argume...
CVE-2025-7442 WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters in the MJgmgtdeleteclasslimitformember, MJgmgtgetyearlyincomeexpense, MJgmgtgetmonthlyincomeexpense, MJgmgtaddclasslimit, MJgmgtviewmeetingdetail, and MJgmgtcreatemeeting functio...
CVE-2025-53475
A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage. This issue requires an authenticated attacker with at least user-level privileges. Certain parameters in this function are not properly sanitized, allowin...
CVE-2025-7191
A vulnerability has been found in code-projects Student Enrollment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-7174
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue-book.php. The manipulation of the argument idn leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...
PT-2025-29148 · Code Projects · Lifestylestore
Name of the Vulnerable Software and Affected Versions: code-projects LifeStyle Store version 1.0 Description: A critical issue exists in code-projects LifeStyle Store 1.0. The vulnerability is located in an unknown functionality of the /success.php file. Manipulation of the ID argument results in...
CVE-2025-7199
A vulnerability, which was classified as critical, has been found in code-projects Library System 1.0. This issue affects some unknown processing of the file /notapprove.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-7200
CVE-2025-7200 affects krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. The vulnerability is a SQL injection in the quantity_upd.php file, caused by improper handling of the med_name/med_cat/ex_date arguments. It is described as remotely exploitable with a pub...
CVE-2025-7200 krishna9772 Pharmacy Management System quantity_upd.php sql injection
A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected is an unknown function of the file quantityupd.php. The manipulation of the argument medname/medcat/exdate leads to sql injection. It is...
CVE-2025-7199 code-projects Library System notapprove.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Library System 1.0. This issue affects some unknown processing of the file /notapprove.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-7189
A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-7187
Code-projects Chat System 1.0 contains a SQL injection in the /user/fetch_member.php file caused by unsafely handling the ID parameter. The vulnerability can be exploited remotely and multiple sources cite exploitation of this parameter to retrieve/modify data. The attached documents do not speci...
CVE-2025-7186 code-projects Chat System fetch_chat.php sql injection
A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetchchat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...
CVE-2025-7183
CVE-2025-7183 affects Campcodes Sales and Inventory System 1.0, specifically the file /pages/customer_account.php where the manipulation of the parameter Customer leads to a SQL injection. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. Multiple connected...
WordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tom Broucke Patchstack Alliance in WordPress Plugin Funnel Builder by FunnelKit versions = 3.10.2...