6.9

CVSS4.0

CVE-2025-11040 - code-projects Hostel Management System index.php sql injection

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/mod_users/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit …

πŸ“… Published: Sept. 26, 2025, 8:02 p.m. πŸ”„ Last Modified: Oct. 3, 2025, 3:23 p.m.

6.9

CVSS4.0

CVE-2025-11039 - Campcodes Computer Sales and Inventory System us_edit1.php sql injection

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_edit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The…

πŸ“… Published: Sept. 26, 2025, 7:32 p.m. πŸ”„ Last Modified: Oct. 3, 2025, 3:12 p.m.

5.3

CVSS4.0

CVE-2025-11038 - itsourcecode Online Clinic Management System details.php sql injection

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to …

πŸ“… Published: Sept. 26, 2025, 7:32 p.m. πŸ”„ Last Modified: Oct. 3, 2025, 3:11 p.m.

6.9

CVSS4.0

CVE-2025-11037 - code-projects E-Commerce Website admin_index_search.php sql injection

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th…

πŸ“… Published: Sept. 26, 2025, 7:02 p.m. πŸ”„ Last Modified: Oct. 23, 2025, 8:06 p.m.

6.9

CVSS4.0

CVE-2025-11036 - code-projects E-Commerce Website admin_account_update.php sql injection

A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be…

πŸ“… Published: Sept. 26, 2025, 7:02 p.m. πŸ”„ Last Modified: Oct. 23, 2025, 8:06 p.m.

5.3

CVSS4.0

CVE-2025-11035 - Jinher OA text xml external entity reference

A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=GetUrl&style=1. This manipulation causes xml external entity reference. The attack can be initiated remotely. The exploit has been publicly di…

πŸ“… Published: Sept. 26, 2025, 6:32 p.m. πŸ”„ Last Modified: Oct. 8, 2025, 8:13 p.m.

5.3

CVSS4.0

CVE-2025-11034 - Dibo Data Decision Making System common_dep.action.jsp downloadImpTemplet path traversal

A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function downloadImpTemplet of the file /common/dep/common_dep.action.jsp. The manipulation of the argument filePath results in path traversal. It is possible to launch the attack remotely. The ex…

πŸ“… Published: Sept. 26, 2025, 6:02 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

6.9

CVSS4.0

CVE-2025-11033 - kidaze CourseSelectionSystem COUNT3s7.php sql injection

A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to sql injection. It is possible to initiate the attack remotely.…

πŸ“… Published: Sept. 26, 2025, 6:02 p.m. πŸ”„ Last Modified: Oct. 8, 2025, 8:15 p.m.

6.9

CVSS4.0

CVE-2025-11032 - kidaze CourseSelectionSystem COUNT3s6.php sql injection

A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of the file /Profilers/PriProfile/COUNT3s6.php. Executing manipulation of the argument CPU can lead to sql injection. The attack may be performed from rem…

πŸ“… Published: Sept. 26, 2025, 5:32 p.m. πŸ”„ Last Modified: Oct. 8, 2025, 8:16 p.m.

6.9

CVSS4.0

CVE-2025-11031 - DataTables examples.php path traversal

A flaw has been found in DataTables up to 1.10.13. The affected element is an unknown function of the file /examples/resources/examples.php. This manipulation of the argument src causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may be used. U…

πŸ“… Published: Sept. 26, 2025, 5:02 p.m. πŸ”„ Last Modified: Oct. 7, 2025, 6:31 p.m.
Total resulsts: 349182
Page 3660 of 34,919
Β« previous page Β» next page
Filters