CVE-2025-12263

CVE-2025-12263 affects code-projects Online Event Judging System 1.0. The /edit_judge.php file is vulnerable to SQL injection via the judge_id parameter. The vulnerability can be exploited remotely and public exploit may exist, potentially enabling unauthorized data access or modification. Public...

CVE-2025-10104

The CVE-2025-10104 entry concerns code-projects Online Event Judging System 1.0. Affected is the /review_search.php component where the txtsearch parameter can be manipulated to perform SQL injection. The vulnerability enables remote exploitation, and multiple sources note that the exploit has be...

CVE-2025-10102

The CVE-2025-10102 entry concerns code-projects Online Event Judging System 1.0. The vulnerability is a SQL injection in the /index.php file caused by manipulating the Username parameter; it is exploitable remotely and the exploit has been publicly released. Multiple connected sources corroborate...

CVE-2025-9610

The CVE-2025-9610 entry relates to code-projects Online Event Judging System 1.0 with a SQL injection in /create_account.php. The fname parameter manipulation leads to SQL injection, enabling remote exploitation. Multiple connected sources confirm the vulnerability and public exploitation discuss...

CVE-2025-12254

The CVE-2025-12254 entry concerns code-projects Online Event Judging System 1.0, with a SQL injection vulnerability in the add_judge.php handler caused by unsanitized input through the fullname parameter. Multiple connected sources describe this flaw as allowing remote exploitation to execute arb...

CVE-2025-10103

CVE-2025-10103 affects code-projects Online Event Judging System 1.0. The vulnerability is a SQL injection in the /home.php file caused by manipulation of the main_event argument, potentially exploitable remotely. Multiple connected sources confirm this issue and note that the exploit has been pu...

CVE-2025-12252

Summary: Multiple sources confirm a SQL injection in Code-Projects Online Event Judging System 1.0, arising from /ajax/action.php via manipulation of the content parameter. This is an externally exploitable, remote flaw with public exploit presence. Concrete details across CNVD-2025-26165, RH-CVE...

CVE-2025-12256

CVE-2025-12256 affects code-projects Online Event Judging System 1.0, with a SQL injection in /edit_contestant.php via the contestant_id parameter. A remote attacker can exploit this, and public exploits exist. Root cause is lack of validation of externally provided SQL statements in that paramet...

CVE-2025-12255

CVE-2025-12255 affects code-projects Online Event Judging System 1.0. A SQL injection flaw originates from the lack of validation of the fullname parameter in /add_contestant.php. The vulnerability allows remote execution of arbitrary SQL commands and may lead to data theft or modification; an ex...

CVE-2025-12262

Vulnerability summary (CVE-2025-12262) : The code-projects Online Event Judging System 1.0 is affected. The SQL injection originates from unsafely handling the parameter crit_id in the file /edit_criteria.php , enabling remote exploitation. Multiple connected sources (CNVD/CNNVD/Red Hat advisory ...