9 matches found
CVE-2025-8409
CVE-2025-8409 affects code-projects Vehicle Management 1.0. The vulnerability is in the file /filter.php, where the input parameter (notably the "from" parameter) is not validated, allowing an SQL injection. Attack can be launched remotely and exploitation has been publicly disclosed. Affected im...
CVE-2025-8330
CVE-2025-8330 affects code-projects Vehicle Management 1.0, with a SQL injection in /edit1.php via the sno parameter. Root cause: unsafely constructed SQL statements from user-controlled input. Impact details in connected docs indicate potential data exposure and integrity/availability concerns; ...
CVE-2025-8374
CVE-2025-8374 concerns code-projects Vehicle Management 1.0. A vulnerability exists in the file /addcompany.php where manipulation of the parameter company enables a SQL injection. The issue is exploitable remotely and, according to multiple sources, the exploit has been publicly disclosed. The C...
CVE-2025-8376
CVE-2025-8376 affects code-projects Vehicle Management 1.0, with a SQL injection in the updatebal.php file caused by unsafely handling the company parameter. Public exploitation is indicated by multiple sources; remote attacker access is possible and data confidentiality/integrity/availability ca...
CVE-2025-8408
The CVE-2025-8408 entry concerns code-projects Vehicle Management 1.0, where an unknown function in /filter1.php makes the vehicle parameter vulnerable to SQL injection. The vulnerability is remotely exploitable, and exploits have been publicly disclosed. Multiple sources (CNVD/Red Hat/NVD/CVE re...
CVE-2025-8329
CVE-2025-8329 affects code-projects Vehicle Management 1.0. The vulnerability is in an unknown portion of the file /filter3.php, where manipulating the parameter “company” leads to SQL injection. It is remotely exploitable and the exploit has been publicly disclosed. Other parameters may be affec...
CVE-2025-8375
The CVE-2025-8375 entry concerns code-projects Vehicle Management 1.0. The vulnerability is a SQL injection in the file /addvehicle.php, caused by unsafely handling the vehicle parameter. Affected component: the processing of the vehicle argument in /addvehicle.php. Impact is described as potenti...
CVE-2025-8407
CVE-2025-8407 affects code-projects Vehicle Management 1.0. The vulnerability is a SQL injection in the processing of the file /filter2.php , caused by manipulation of the from parameter; exploitation can be remote and the exploit has been publicly disclosed. Several sources (NVD, CNVD, Red Hat, ...
CVE-2025-8373
The CVE-2025-8373 entry concerns code-projects Vehicle Management 1.0. A SQL injection vulnerability exists in the /print.php file via the sno parameter, allowing remote exploitation. Multiple connected sources confirm the flaw, its presence in Vehicle Management 1.0, and the remote-access risk w...