5189 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2025-2387
Online Food Ordering System Web Database
6.9
MEDIUM
EPSS
0.2%
2025 CWE-89 1 PoC

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-10596
Online Exam Form Submission Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 2 PoCs

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument usn results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

CVE-2025-9701
Simple Cafe Billing System Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-7606
AVL Rooms Web Database
6.9
MEDIUM
EPSS
0.1%
2025 CWE-89 1 PoC

A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-2654
AC Repair and Services System Web Database
6.9
MEDIUM
EPSS
0.1%
2025 CWE-89 1 PoC

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manage_service.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-10788
Online Hotel Reservation System Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-11736
Online Examination System Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

CVE-2025-1965
Online Hotel Booking Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5369
PHP Display Username After Login Web Database
6.9
MEDIUM
EPSS
0.2%
2025 CWE-89 3 PoCs

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-10417
Grocery Sales and Inventory System Web Database
6.9
MEDIUM
EPSS
0.1%
2025 CWE-89 1 PoC

A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_product. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

CVE-2025-0534
Campaign Management System Platform for Women Web Database
6.9
MEDIUM
EPSS
0.1%
2025 CWE-89 1 PoC

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Code/loginnew.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-10598
Pet Grooming Management Software Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_product.php. Such manipulation of the argument group_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

CVE-2025-2060
Emergency Ambulance Hiring Portal Web Database
6.9
MEDIUM
EPSS
0.1%
2025 CWE-89 1 PoC

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-9473
Online Bank Management System Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 2 PoCs

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-9741
Human Resource Integrated System Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /login_query12.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-4467
Online Student Clearance System Web Database
6.9
MEDIUM
EPSS
0.2%
2025 CWE-89 1 PoC

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-10076
Online Polling System Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-13449
Online Shop Project Web Database
6.9
MEDIUM
EPSS
0.0%
2025 CWE-89 1 PoC

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

CVE-2025-9509
Apartment Management System Web Database
6.9
MEDIUM
EPSS
0.1%
2025 CWE-89 1 PoC

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fair_info_all.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

CVE-2025-7542
User Registration & Login and User Management System Web Database
6.9
MEDIUM
EPSS
0.2%
2025 CWE-89 1 PoC

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user-profile.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.