CWE-74
CVEs classified under CWE-74, newest first.
1319 CVEsRSS
CVE-2025-10960Medium· 6.3A vulnerability was found in Wavlink NU516U1 M16U1_V240425
A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument delete_list results in…
CVE-2025-10959Medium· 6.3A vulnerability has been found in Wavlink NU516U1 M16U1_V240425
A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the file /cgi-bin/firewall.cgi. Such manipulation of the argument dmz_flag leads to command injection. The attack can be …
CVE-2025-10958Medium· 6.3A flaw has been found in Wavlink NU516U1 M16U1_V240425
A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireless.cgi of the component AddMac Page. This manipulation of the argument macAddr causes command injection. Remote exploi…
CVE-2025-10857High· 7.3A security flaw has been discovered in Campcodes Point of Sale System POS 1.0
A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The at…
CVE-2025-10851High· 7.3A security flaw has been discovered in Campcodes Gym Management System 1.0
A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to …
CVE-2025-10848Medium· 6.3A vulnerability was identified in Campcodes Society Membership Information System 1.0
A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /check_student.php. Such manipulation of the argument student_id leads to sql injection. The at…
CVE-2025-10844Medium· 6.3A vulnerability has been found in Portabilis i-Educar up to 2.10
A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/Cadastro/aluno. The manipulation of the argument is leads to sql injection. Remote exploitation of…
CVE-2025-10843High· 7.3A flaw has been found in Reservation Online Hotel Reservation System 1.0
A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation of the argument confirm can lead to sq…
CVE-2025-10842High· 7.3A vulnerability was detected in code-projects Online Bidding System 1.0
A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/wew.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated…
CVE-2025-10841High· 7.3A security vulnerability has been detected in code-projects Online Bidding System 1.0
A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/weweee.php. Such manipulation of the argument ID leads to sql injection. The attack can be…
CVE-2025-10836High· 7.3A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be …
CVE-2025-10835Medium· 6.3A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.php. Performing manipulation of the argument ID results in sql injection. The a…
CVE-2025-10834High· 7.3A vulnerability was identified in itsourcecode Open Source Job Portal 1.0
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument user_email leads to sql injection. It is possible to la…
CVE-2025-10833High· 7.3A vulnerability was determined in 1000projects Bookstore Management System 1.0
A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate th…
CVE-2025-10832High· 7.3A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0
A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetch_product_details.php. The manipulation of the argument barcode results in sql injection…
CVE-2025-10831High· 7.3A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0
A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possib…
CVE-2025-10830High· 7.3A flaw has been found in Campcodes Computer Sales and Inventory System 1.0
A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/inv_edit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can…
CVE-2025-10829High· 7.3A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0
A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/sup_edit1.php. Performing manipulation of the argument ID results in sql injection. Remote expl…
CVE-2025-10828Medium· 6.3A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be l…
CVE-2025-10826Medium· 6.3A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdat…
CVE-2025-10825Medium· 6.3A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack c…
CVE-2025-10846Medium· 6.3A vulnerability was determined in Portabilis i-Educar up to 2.10
A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/edit. This manipulation of the argument ID causes sql injection. The attack is possible to…
CVE-2025-10845Medium· 6.3A vulnerability was found in Portabilis i-Educar up to 2.10
A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/ComponenteCurricular/view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. T…
CVE-2025-10840Medium· 6.3A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/print-payment.php. This manipulation of the argument sql111 causes sql injection. The attack can b…
CVE-2025-10839Medium· 6.3A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /admin/inv-print.php. The manipulation of the argument ID results in sql injection. It is…
CVE-2025-10817High· 7.3A weakness has been identified in Campcodes Online Learning Management System 1.0
A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_user.php. Executing manipulation of the argument firstname can lead to sql injection. The…
CVE-2025-10814Medium· 6.3A vulnerability was determined in D-Link DIR-823X 240126/240802/250416
A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack…
CVE-2025-10813High· 7.3A vulnerability was found in code-projects Hostel Management System 1.0
A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The manipulation of the argument Home results in sql injection. It is possible to…
CVE-2025-10812High· 7.3A vulnerability has been found in code-projects Hostel Management System 1.0
A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It …
CVE-2025-10808High· 7.3A weakness has been identified in Campcodes Farm Management System 1.0
A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of the argument Type causes sql injection. Remote exploitation of the attack is pos…