CWE-74
CVEs classified under CWE-74, newest first.
1319 CVEsRSS
CVE-2025-11593Medium· 6.3A flaw has been found in CodeAstro Gym Management System 1.0
A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated…
CVE-2025-11592Medium· 6.3A vulnerability was detected in CodeAstro Gym Management System 1.0
A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotel…
CVE-2025-11591Medium· 6.3A security vulnerability has been detected in CodeAstro Gym Management System 1.0
A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql inject…
CVE-2025-11590Medium· 6.3A weakness has been identified in CodeAstro Gym Management System 1.0
A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql inje…
CVE-2025-11611Medium· 6.3A weakness has been identified in SourceCodester Simple Inventory System 1.0
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out …
CVE-2025-11597Medium· 6.3A vulnerability was identified in code-projects E-Commerce Website 1.0
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is po…
CVE-2025-11589Medium· 6.3A security flaw has been discovered in CodeAstro Gym Management System 1.0
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to i…
CVE-2025-11588Medium· 6.3A vulnerability was identified in CodeAstro Gym Management System 1.0
A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from …
CVE-2025-11585High· 7.3A vulnerability was found in code-projects Project Monitoring System 1.0
A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed re…
CVE-2025-11584High· 7.3A vulnerability has been found in code-projects Online Job Search Engine 1.0
A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote explo…
CVE-2025-11582High· 7.3A vulnerability was detected in code-projects Online Job Search Engine 1.0
A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attac…
CVE-2025-11583High· 7.3A flaw has been found in code-projects Online Job Search Engine 1.0
A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjob.php. Executing manipulation of the argument txtjobID can lead to sql injection. The attack may be launched remotely…
CVE-2025-11558High· 7.3A vulnerability was found in code-projects E-Commerce Website 1.0
A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible …
CVE-2025-11557High· 7.3A vulnerability has been found in projectworlds Gate Pass Management System 1.0
A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be e…
CVE-2025-11556High· 7.3A flaw has been found in code-projects Simple Leave Manager 1.0
A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of the argument table causes sql injection. Remote exploitation of the attack is possible. …
CVE-2025-11555High· 7.3PoCA vulnerability was detected in Campcodes Online Learning Management System 1.0
A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The manipulation of the argument date_start results in sql injection. The attack may…
CVE-2025-11553Medium· 6.3A weakness has been identified in code-projects Courier Management System 1.0
A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql in…
CVE-2025-11552Medium· 6.3A vulnerability was identified in code-projects Online Complaint Site 1.0
A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the …
CVE-2025-11551Medium· 6.3A vulnerability was determined in code-projects Student Result Manager 1.0
A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to …
CVE-2025-11530Medium· 6.3A weakness has been identified in code-projects Online Complaint Site 1.0
A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation of the argument state causes sql injection. The attack is possible to be carri…
CVE-2025-11516Medium· 6.3A weakness has been identified in code-projects Online Complaint Site 1.0
A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible…
CVE-2025-11515Medium· 6.3A security flaw has been discovered in code-projects Online Complaint Site 1.0
A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-complaint.php. Performing manipulation of the argument cid results in sql injectio…
CVE-2025-11514Medium· 6.3A vulnerability was identified in code-projects Online Complaint Site 1.0
A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be per…
CVE-2025-11513High· 7.3A vulnerability was determined in code-projects E-Commerce Website 1.0
A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be car…
CVE-2025-11523Medium· 6.3A vulnerability was detected in Tenda AC7 15.03.06.44
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remo…
CVE-2025-11511Medium· 6.3A flaw has been found in code-projects E-Commerce Website 1.0
A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched r…
CVE-2025-11509Medium· 6.3A vulnerability was detected in code-projects E-Commerce Website 1.0
A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be init…
CVE-2025-11507High· 7.3A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1
A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The…
CVE-2025-11506High· 7.3A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql inj…
CVE-2025-11505High· 7.3A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1
A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to i…