5 matches found
CVE-2024-8762
CVE-2024-8762 affects code-projects Crud Operation System 1.0. The vulnerability is an SQL injection in the /updatedata.php file caused by unsafe handling of the sid parameter, exploitable remotely. Multiple sources corroborate that the impact can compromise confidentiality, integrity, and availa...
CVE-2024-8868
CVE-2024-8868 affects code-projects Crud Operation System 1.0. The vulnerability is a SQL injection in the savedata.php processing path, triggered by manipulating the sname parameter. Impact is described as critical, with remote attack capability and publicly disclosed exploit. Affected component...
CVE-2024-9011
The CVE-2024-9011 issue affects code-projects Crud Operation System 1.0, specifically an unknown function in updata.php where manipulating the sid parameter enables SQL injection. The vulnerability can be exploited remotely and has public exploit disclosure. The connected PT-2024-39365 entry prov...
CVE-2024-9812
Summary (CVE-2024-9812) A SQL injection flaw exists in code-projects Crud Operation System 1.0, affecting the delete.php file via manipulation of the “sid” parameter. The issue is exploitable remotely and can impact confidentiality, integrity, and availability as described in multiple sources. Th...
CVE-2025-11347
CVE-2025-11347 affects code-projects Student Crud Operation up to 3.3, where the function move_uploaded_file in add.php allows unrestricted file upload. The vulnerability can be triggered remotely and the exploit has been publicized. Affected versions are stated as up to 3.3; sources suggest that...