CVE-2025-8237

The CVE-2025-8237 entry describes a SQL injection in code-projects Exam Form Submission 1.0, caused by improper handling of the credits parameter in /admin/update_s1.php. This enables remote exploitation and is described as a critical issue; multiple sources corroborate the vulnerability in the s...

CVE-2025-8255

CVE-2025-8255 affects the code-projects Exam Form Submission 1.0 . The vulnerability is in the handling of the file at /register.php where manipulation of the image parameter allows unrestricted file upload. Reports state the attack can be initiated remotely and that the exploit has been publicly...

CVE-2025-8251

CVE-2025-8251 affects code-projects Exam Form Submission 1.0. The vulnerability lies in the /admin/delete_s4.php function where manipulating the ID parameter leads to an SQL injection. This can be exploited remotely and the exploit has been publicly disclosed. Multiple connected sources corrobora...

CVE-2025-8253

CVE-2025-8253 – code-projects Exam Form Submission 1.0 is affected by a vulnerability in the file /admin/delete_s6.php, where improper handling of the ID parameter enables an SQL injection. The issue is exploitable remotely and has been publicly disclosed. Multiple sources report high to critical...

CVE-2025-8271

CVE-2025-8271 affects code-projects Exam Form Submission 1.0. The vulnerability resides in unknown code within the file /admin/delete_s3.php , where manipulation of the ID argument enables SQL injection . It supports remote initiation and, per sources, the exploit has been publicly disclosed. Aff...

CVE-2025-8240

Summary: CVE-2025-8240 affects code-projects’ Exam Form Submission 1.0. The vulnerability is a SQL injection in the /user/dashboard.php file triggered by manipulating the phone parameter. This enables remote exploitation; multiple sources indicate a critical severity. The root cause is unsafely f...

CVE-2025-8269

CVE-2025-8269 affects code-projects Exam Form Submission 1.0. The vulnerability is an SQL injection in the file /admin/delete_s1.php caused by manipulation of the ID parameter. The issue can be triggered remotely and exploit details have been publicly disclosed. Documents indicate exploitation po...

CVE-2025-8273

CVE-2025-8273 affects code-projects Exam Form Submission 1.0. The vulnerability is an SQL injection in the file /admin/update_s8.php where manipulating the credits parameter enables remote exploitation. Multiple connected documents confirm the issue and note that an exploit has been publicly disc...

CVE-2025-8326

CVE-2025-8326 concerns code-projects Exam Form Submission 1.0. The vulnerability is triggered by manipulating the ID parameter in the /admin/delete_s7.php function, leading to a SQL injection. It enables remote exploitation and exploitation has been publicly disclosed. Several connected sources r...

CVE-2025-8372

The CVE-2025-8372 entry concerns code-projects Exam Form Submission 1.0. Publicly disclosed SQL injection/scenario stems from the /admin/update_s7.php file, via manipulation of the credits parameter. The root cause is lack of validation/execution safeguards for external SQL statements in credits,...

CVE-2025-8252

CVE-2025-8252 concerns code-projects Exam Form Submission 1.0. Affected component is the file /admin/delete_s5.php, where manipulation of the ID parameter enables SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. The connected documents consistently des...

CVE-2025-8239

CVE-2025-8239 affects code-projects Exam Form Submission 1.0. The vulnerability is an SQL injection in the /admin/ area caused by unsafely using the email parameter, exploitable remotely and publicly disclosed. Multiple sources corroborate remote exploitation and high/severe impact across confide...

CVE-2025-8249

CVE-2025-8249 affects code-projects Exam Form Submission 1.0. The vulnerability is an SQL injection in the processing of the file /admin/update_s3.php caused by unsafely handling the credits parameter. The issue can be exploited remotely, and public disclosure is noted in several sources, with at...

CVE-2025-8270

CVE-2025-8270 affects code-projects Exam Form Submission 1.0. The vulnerable component is the /admin/delete_s2.php file, where manipulation of the ID parameter enables SQL injection. Exploitation is remotely possible and exploits have been publicly disclosed. Multiple sources corroborate the issu...

CVE-2025-8250

CVE-2025-8250 affects code-projects Exam Form Submission 1.0. The issue is located in an unknown function of the file /admin/update_s4.php and stems from manipulating the credits argument, which leads to an SQL injection. The exploit is capable of remote execution, and public disclosure of the ex...

CVE-2025-8328

CVE-2025-8328 relates to code-projects’ Exam Form Submission 1.0. The vulnerability resides in /register.php where the USN parameter can be manipulated to perform SQL injection. Exploitation is possible remotely and public exploits have been disclosed. Multiple connected sources corroborate the i...

CVE-2025-8238

The CVE-2025-8238 issue affects code-projects Exam Form Submission 1.0, with the vulnerability in /admin/update_s2.php where manipulating the credits parameter enables SQL injection. Remote exploitation is possible, and public exploits have been disclosed. Multiple sources corroborate the flaw an...

CVE-2025-8272

CVE-2025-8272 affects code-projects Exam Form Submission v1.0. The vulnerability occurs in /admin/update_fst.php due to manipulation of the credits parameter, leading to SQL injection. Exploitation appears to be remote with public disclosure. Impact is described as high/critical across confidenti...

CVE-2025-8371

CVE-2025-8371 pertains to code-projects Exam Form Submission 1.0, where the vulnerability resides in an unknown function within /admin/update_s5.php. The credits parameter is susceptible to SQL injection, exploitable remotely and with exploits disclosed publicly. Multiple connected sources (CNVD,...

CVE-2025-8327

CVE-2025-8327 affects code-projects Exam Form Submission 1.0. The vulnerability is a SQL injection in the parameter ID of the file /admin/delete_s8.php, enabling remote exploitation. Multiple connected sources confirm the attack vector is via ID manipulation and that exploitation has been publicl...