CWE-74
CVEs classified under CWE-74, newest first.
1319 CVEsRSS
CVE-2025-12933Medium· 6.3A vulnerability was identified in SourceCodester Baby Care System 1.0
A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack…
CVE-2025-12932Medium· 4.7A vulnerability was determined in SourceCodester Baby Care System 1.0
A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be …
CVE-2025-12931Medium· 6.3A vulnerability was found in SourceCodester Food Ordering System 1.0
A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is po…
CVE-2025-12930Medium· 6.3A vulnerability has been found in SourceCodester Food Ordering System 1.0
A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack re…
CVE-2025-12929High· 7.3A flaw has been found in SourceCodester Survey Application System 1.0
A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The att…
CVE-2025-12928High· 7.3A vulnerability was detected in code-projects Online Job Search Engine 1.0
A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible …
CVE-2025-12921Medium· 4.3A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13
A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFData?action=confirm of the component CRF Data Import. Such manipulation of the …
CVE-2025-12926Medium· 6.3A weakness has been identified in SourceCodester Farm Management System 1.0
A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the atta…
CVE-2025-12914Medium· 4.7A vulnerability has been found in aaPanel BaoTa up to 11.2.x
A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the component Backend. The manipulation of the argument Name leads to sql injection. …
CVE-2025-12913Medium· 4.7A flaw has been found in code-projects Responsive Hotel Site 1.0
A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remot…
CVE-2025-12857Medium· 4.7A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0
A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack …
CVE-2025-12856Medium· 4.7A weakness has been identified in code-projects Responsive Hotel Site 1.0
A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remo…
CVE-2025-12855Medium· 4.7A security flaw has been discovered in code-projects Responsive Hotel Site 1.0
A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processing of the file /admin/newsletterdel.php. The manipulation of the argument eid results in sql injection. It is possibl…
CVE-2025-12853Medium· 4.7A vulnerability was determined in SourceCodester Best House Rental Management System 1.0
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument ID can lead to sql injection. The attac…
CVE-2025-12873Medium· 4.7A security flaw has been discovered in Campcodes School File Management 1.0
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to ini…
CVE-2025-12342High· 7.3A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014
A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried …
CVE-2025-12339High· 7.3A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0
A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file /admin/admin_football.php. The manipulation of the argument pid leads to sql injectio…
CVE-2025-12338High· 7.3A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing a manipulation of the argument pid can lead to sql injection. The…
CVE-2025-12337High· 7.3A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0
A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Performing a manipulation of the argument pid results in sql injection. The atta…
CVE-2025-12336High· 7.3A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injecti…
CVE-2025-12329Medium· 6.3A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5
A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected element is an unknown function of the file /details.php. Performing manipulation of the argument ID results in sql inje…
CVE-2025-12327Medium· 6.3A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5
A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the file /description.php. This manipulation of the argument ID causes sql injection. The a…
CVE-2025-12326High· 7.3A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5
A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This vulnerability affects unknown code of the file /process.php of the component POST Request Handler. The manipulation of the argument un re…
CVE-2025-12325High· 7.3A vulnerability has been found in SourceCodester Best Salon Management System 1.0
A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be init…
CVE-2025-12316High· 7.3A vulnerability was identified in code-projects Courier Management System 1.0
A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The manipulation of the argument OfficeName leads to sql injection. The attack is poss…
CVE-2025-12315Medium· 4.7A vulnerability was determined in code-projects Food Ordering System 1.0
A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be execu…
CVE-2025-12314Medium· 4.7A vulnerability was found in code-projects Food Ordering System 1.0
A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploit…
CVE-2025-12313Medium· 6.3A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1
A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launc…
CVE-2025-12309High· 7.3A weakness has been identified in code-projects Nero Social Networking Site 1.0
A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch t…
CVE-2025-12308High· 7.3A security flaw has been discovered in code-projects Nero Social Networking Site 1.0
A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql …