CVE-2025-6456 code-projects Online Hotel Reservation System order.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The attack may be launche...

PT-2025-26548 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: code-projects Online Bidding System version 1.0 Description: A critical vulnerability has been found in the code-projects Online Bidding System. The issue is related to an unknown function of the file /bidlog.php, where the manipulation of th...

PT-2025-26540 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the code-projects Online Hotel Reservation System. The issue affects an unknown functionality of the file /messageexec.php. The...

PT-2025-26542 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the code-projects Online Hotel Reservation System. This affects an unknown part of the file /reservation/demo.php. The manipulation o...

CVE-2025-6447 code-projects Simple Online Hotel Reservation System index.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

CVE-2025-6420

CVE-2025-6420 affects code-projects Simple Online Hotel Reservation System 1.0, with SQL injection in /admin/add_room.php via the room_type parameter. Exploitation can be remote; exploits have been disclosed publicly. Several connected sources confirm the issue across NVD, CNVD, CIRCL, and vendor...

CVE-2025-6413 PHPGurukul Art Gallery Management System changeimage1.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.1. This affects an unknown part of the file /admin/changeimage1.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-6412

The CVE-2025-6412 entry affects PHPGurukul Art Gallery Management System 1.1, specifically the /admin/changeimage.php endpoint where the editid parameter is vulnerable to SQL injection. The vulnerability can be triggered remotely, and exploits have been disclosed publicly. Multiple references cor...

PT-2025-26520 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical vulnerability has been found in the PHPGurukul Art Gallery Management System, affecting an unknown functionality of the file /admin/add-artist.php. The manipulation ...

CVE-2025-6364

The CVE-2025-6364 entry concerns code-projects Simple Pizza Ordering System 1.0. A vulnerability exists in the /adduser-exec.php file where the Username parameter is not validated, enabling SQL injection. The issue is exploitable remotely over the network and is described with high/critical impac...

CVE-2025-6357

The CVE-2025-6357 entry concerns Code-Projects Simple Pizza Ordering System 1.0, where an SQL injection is triggered by manipulating the person parameter in /paymentportal.php. Exploitation is possible remotely and the vulnerability impacts confidentiality, integrity, and availability. Multiple c...

CVE-2025-6354 code-projects Online Shoe Store customer_signup.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customersignup.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

CVE-2025-52821 WordPress Video List Manager plugin <= 1.7 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in thanhtungtnt Video List Manager video-list-manager allows SQL Injection.This issue affects Video List Manager: from n/a through = 1.7...

CVE-2025-6315

CVE-2025-6315 impacts code-projects Online Shoe Store 1.0. The vulnerability is in the /cart2.php file where the ID parameter is unsafely used, allowing SQL injection that can be triggered remotely. Multiple connected sources corroborate a SQL-injection issue originating from the ID argument, wit...

CVE-2025-6313 Campcodes Sales and Inventory System cat_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/catadd.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-6306

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/adminindex.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6304

A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...

PT-2025-26271 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical vulnerability has been found in the code-projects Online Shoe Store, affecting an unknown functionality of the file /contactus1.php. The manipulation of the Message argument...

PT-2025-26264 · Code Projects · Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A critical issue was found in the Hostel Management System. The problem affects an unknown functionality of the file /allocated rooms.php. The manipulation of the search box...

PT-2025-26323 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shoe Store version 1.0 Description: A critical vulnerability has been found in the code-projects Online Shoe Store, affecting an unknown functionality of the file /contactus.php. The manipulation of the email argument lea...