CWE-74
CVEs classified under CWE-74, newest first.
1318 CVEsRSS
CVE-2025-13271High· 7.3A vulnerability was determined in Campcodes School Fees Payment Management System 1.0
A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitat…
CVE-2025-13270Medium· 6.3A vulnerability was found in Campcodes School Fees Payment Management System 1.0
A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be …
CVE-2025-13269Medium· 6.3A vulnerability has been found in Campcodes School Fees Payment Management System 1.0
A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The…
CVE-2025-13268Medium· 6.3A flaw has been found in Dromara dataCompare up to 1.0.1
A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Ex…
CVE-2025-13267Medium· 6.3A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0
A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection…
CVE-2025-13264Medium· 6.3A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0
A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The manipulation of the argument ID results in sql injection. The attack may be per…
CVE-2025-13260Medium· 6.3A vulnerability has been found in Campcodes Supplier Management System 1.0
A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack …
CVE-2025-13259Medium· 6.3A flaw has been found in Campcodes Supplier Management System 1.0
A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely.…
CVE-2025-13257High· 7.3A security vulnerability has been detected in itsourcecode Inventory Management System 1.0
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injecti…
CVE-2025-13256Medium· 6.3A weakness has been identified in projectworlds Advanced Library Management System 1.0
A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a manipulation of the argument roll_number can lead to sql injection. It is possib…
CVE-2025-13255Medium· 6.3A security flaw has been discovered in projectworlds Advanced Library Management System 1.0
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_search.php. Performing a manipulation of the argument book_pub/book_title results i…
CVE-2025-13254Medium· 6.3A vulnerability was identified in projectworlds Advanced Library Management System 1.0
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add_member.php. Such manipulation of the argument roll_number leads to sql injection. The attack…
CVE-2025-13253Medium· 6.3A vulnerability was determined in projectworlds Advanced Library Management System 1.0
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /add_librarian.php. This manipulation of the argument Username causes sql injection. The attack is possible …
CVE-2025-13263Medium· 6.3A vulnerability was identified in SourceCodester Online Magazine Management System 1.0
A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categories.php. The manipulation of the argument c leads to sql injection. The atta…
CVE-2025-13290Medium· 6.3A vulnerability has been found in code-projects Simple Food Ordering System 1.0
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible…
CVE-2025-13289Medium· 6.3A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0
A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode…
CVE-2025-13247High· 7.3A security flaw has been discovered in PHPGurukul Tourism Management System 1.0
A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possi…
CVE-2025-13210Medium· 4.7A security vulnerability has been detected in itsourcecode Inventory Management System 1.0
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injectio…
CVE-2025-13208Medium· 6.3A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0
A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subj…
CVE-2025-13203High· 7.3A weakness has been identified in code-projects Simple Cafe Ordering System 1.0
A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible…
CVE-2025-13201High· 7.3A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0
A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack m…
CVE-2025-13172Medium· 6.3A security flaw has been discovered in CodeAstro Gym Management System 1.0
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may …
CVE-2025-13170High· 7.3A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0
A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/edit_account.php. Performing a manipulation of the argument admin_id results in sql i…
CVE-2025-13169High· 7.3A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0
A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /add_query_reserve.php. Such manipulation of the argument room_id leads to sql in…
CVE-2025-13122High· 7.3A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0
A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of the file /php/api_patient_checkin.php. Performing manipulation of the argumen…
CVE-2025-13121High· 7.3A security vulnerability has been detected in cameasy Liketea 1.0.0
A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/app/Http/Controllers/Front/StoreController.php of the component API Endpoint. Such manipulation of the argument lng/la…
CVE-2025-47286High· 7.2Combodo iTop is a web based IT service management tool
Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and chec…
CVE-2025-12939Medium· 6.3A security flaw has been discovered in SourceCodester Interview Management System up to 1.0
A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /addCandidate.php. The manipulation of the argument candName results in sql inj…
CVE-2025-12938High· 7.3A vulnerability was identified in projectworlds Online Admission System 1.0
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_login.php. The manipulation of the argument keywords leads to sql injection. The…
CVE-2025-12933Medium· 6.3A vulnerability was identified in SourceCodester Baby Care System 1.0
A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack…