CWE-74
CVEs classified under CWE-74, newest first.
1319 CVEsRSS
CVE-2025-12307High· 7.3A vulnerability was identified in code-projects Nero Social Networking Site 1.0
A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The atta…
CVE-2025-12306High· 7.3A vulnerability was determined in code-projects Nero Social Networking Site 1.0
A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carri…
CVE-2025-12294Medium· 4.7A security flaw has been discovered in SourceCodester Point of Sales 1.0
A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated …
CVE-2025-12293High· 7.3A vulnerability was identified in SourceCodester Point of Sales 1.0
A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the at…
CVE-2025-12292High· 7.3A vulnerability was determined in SourceCodester Point of Sales 1.0
A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack r…
CVE-2025-12287Medium· 4.7A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013
A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admin_dashboard/edit_profile. Such manipulation of the argumen…
CVE-2025-12277High· 7.3A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883
A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The at…
CVE-2025-12266Medium· 6.3A vulnerability was detected in Zytec Dalian Zhuoyun Technology Central Authentication Service up to 20251009
A vulnerability was detected in Zytec Dalian Zhuoyun Technology Central Authentication Service up to 20251009. This vulnerability affects the function _empty of the file /index.php/auth/widget. Performing manipulation of the argument get…
CVE-2025-12263Medium· 6.3A vulnerability was identified in code-projects Online Event Judging System 1.0
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The manipulation of the argument judge_id leads to sql injection. The attack may be initiated r…
CVE-2025-12262Medium· 6.3A vulnerability was determined in code-projects Online Event Judging System 1.0
A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Executing manipulation of the argument crit_id can lead to sql injection. The attack can be…
CVE-2025-12257High· 7.3A security vulnerability has been detected in SourceCodester Online Student Result System 1.0
A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /view_result.php. The manipulation of the argument ID leads to sql injection. The attac…
CVE-2025-12255Medium· 6.3A security flaw has been discovered in code-projects Online Event Judging System 1.0
A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /add_contestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploit…
CVE-2025-12254Medium· 6.3A vulnerability was identified in code-projects Online Event Judging System 1.0
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.php. Such manipulation of the argument fullname leads to sql injection. The atta…
CVE-2025-12252Medium· 6.3A vulnerability was found in code-projects Online Event Judging System 1.0
A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remot…
CVE-2025-12249Medium· 6.3A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545
A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is pos…
CVE-2025-12243Medium· 6.3A vulnerability was found in code-projects Client Details System 1.0
A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.php of the component GET Parameter Handler. Performing manipulation of the argum…
CVE-2025-12242Medium· 6.3A vulnerability has been found in CodeAstro Gym Management System 1.0
A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injectio…
CVE-2025-12238Medium· 6.3A security flaw has been discovered in code-projects Automated Voting System 1.0
A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The att…
CVE-2025-12237High· 7.3A vulnerability was identified in projectworlds Advanced Library Management System 1.0
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed…
CVE-2025-12226Medium· 4.7A vulnerability was found in SourceCodester Best House Rental Management System 1.0
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performing manipulation of the argument house_no results in sql injection. Remote expl…
CVE-2025-12215High· 7.3A flaw has been found in projectworlds Online Shopping System 1.0
A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched rem…
CVE-2025-12208High· 7.3A vulnerability was found in SourceCodester Best House Rental Management System 1.0
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is …
CVE-2025-12328Medium· 6.3A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5
A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /contestproblem.php. Such manipulation of the argument Name leads to sql injection. The attac…
CVE-2025-12261Medium· 6.3A vulnerability was found in CodeAstro Gym Management System 1.0
A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can …
CVE-2025-12256Medium· 6.3A weakness has been identified in code-projects Online Event Judging System 1.0
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Executing manipulation of the argument contestant_id can lead to sql injection. Th…
CVE-2025-12253High· 7.3A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0
A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/get_expiredtime.php. This manipulation of the argument uid causes sql inject…
CVE-2025-62697NoneImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - Lang…
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - Lang…
CVE-2025-11944Medium· 4.7A vulnerability was determined in givanz Vvveb up to 1.0.7.3
A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be init…
CVE-2025-11905Medium· 6.3A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2
A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2. This vulnerability affects the function getArticle of the file app\modules\cms\controller\gather.js. The manipulation results in code injection. The attack may be launched re…
CVE-2025-11904Medium· 6.3A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exp…