CWE-74
CVEs classified under CWE-74, newest first.
1319 CVEsRSS
CVE-2025-11076High· 7.3A vulnerability was found in Campcodes Online Learning Management System 1.0
A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_teacher.php. Performing manipulation of the argument department results in sql injection. Remote explo…
CVE-2025-11075High· 7.3A vulnerability has been found in Campcodes Online Learning Management System 1.0
A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/de_activate.php. Such manipulation of the argument ID leads to sql injection. The attack may be launch…
CVE-2025-11074High· 7.3A flaw has been found in code-projects Project Monitoring System 1.0
A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiat…
CVE-2025-11073Medium· 4.7A vulnerability was detected in Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019
A vulnerability was detected in Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the …
CVE-2025-11070High· 7.3A vulnerability was identified in Projectworlds Online Shopping System 1.0
A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remot…
CVE-2025-11066High· 7.3A flaw has been found in code-projects Online Bidding System 1.0
A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched re…
CVE-2025-11064High· 7.3A security flaw has been discovered in Campcodes Online Learning Management System 1.0
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible…
CVE-2025-11063High· 7.3A vulnerability was identified in Campcodes Online Learning Management System 1.0
A vulnerability was identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /admin/edit_department.php. The manipulation of the argument d leads to sql injection. It is possib…
CVE-2025-11062High· 7.3A vulnerability was determined in Campcodes Online Learning Management System 1.0
A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/save_student.php. Executing manipulation of the argument class_id can lead to sql injection. Th…
CVE-2025-11057High· 7.3A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/print_inv.php. Such manipulation of the argument ID leads to sql injection. Th…
CVE-2025-11056Medium· 6.3A flaw has been found in ProjectsAndPrograms School Management System 1.0
A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file owner_panel/fetch-data/select-students.php. This manipulation of the argument select causes…
CVE-2025-11055High· 7.3A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0
A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updateaddress.php. The manipulation of the argument address results in sql injection. The attack may b…
CVE-2025-11054Medium· 6.3A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0
A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection…
CVE-2025-11053High· 7.3A weakness has been identified in PHPGurukul Small CRM 4.0
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. T…
CVE-2025-11052High· 7.3A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php
A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injec…
CVE-2025-11061High· 7.3A vulnerability was found in Campcodes Online Learning Management System 1.0
A vulnerability was found in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/edit_student.php. Performing manipulation of the argument cys results in sql injection. The attack is possible …
CVE-2025-11040High· 7.3A vulnerability was detected in code-projects Hostel Management System 1.0
A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/mod_users/index.php?view=view. The manipulation of the argument ID results in sq…
CVE-2025-11039High· 7.3A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0
A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_edit1.php. The manipulation of the argument ID leads to sql…
CVE-2025-11038Medium· 6.3A weakness has been identified in itsourcecode Online Clinic Management System 1.0
A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may…
CVE-2025-11036High· 7.3A vulnerability was identified in code-projects E-Commerce Website 1.0
A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be lau…
CVE-2025-11033High· 7.3A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464
A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to …
CVE-2025-11032High· 7.3A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464
A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of the file /Profilers/PriProfile/COUNT3s6.php. Executing manipulation of the argument CPU c…
CVE-2025-11041Medium· 6.3A vulnerability has been found in itsourcecode Open Source Job Portal 1.0
A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The …
CVE-2025-11037High· 7.3A security flaw has been discovered in code-projects E-Commerce Website 1.0
A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack …
CVE-2025-10973High· 7.3A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273
A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273. Affected by this issue is some unknown functionality of the file /admin/show.php. This manipulation of the argument userid causes…
CVE-2025-10967High· 7.3A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9
A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9. This affects an unknown part of the file /chkuser.php. Performing manipulation of the argument Username results in sql injection. The a…
CVE-2025-10964Medium· 6.3A weakness has been identified in Wavlink NU516U1
A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attac…
CVE-2025-10963Medium· 6.3A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425
A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument del_flag results in command injection. It is possible to launch…
CVE-2025-10962Medium· 6.3A vulnerability was identified in Wavlink NU516U1 M16U1_V240425
A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This impacts the function sub_403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac_5g leads to command injection. It…
CVE-2025-10961Medium· 5.5A vulnerability was determined in Wavlink NU516U1 M16U1_V240425
A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to…