Authentication bypass in Kehua Charging Pile Cloud Platform 1.0 exposes the /home endpoint to unauthenticated remote attackers via manipulation of authentication controls, classified under CWE-287 (Improper Authentication). The CVSS 4.0 vector confirms no privileges or user interaction are required (PR:N/UI:N/AV:N/AC:L), with partial confidentiality, integrity, and availability impact against the vulnerable system. A public proof-of-concept exploit has been disclosed with no vendor response or patch available, elevating practical risk despite a low EPSS score of 0.17% (38th percentile) and absence from the CISA KEV catalog.
SQL injection in projectworlds Online Admission System 1.0 exposes the `/adminac.php` endpoint to unauthenticated remote database manipulation via an unsanitized `id` parameter. Any internet-facing deployment of this PHP application allows an attacker to read, modify, or partially disrupt the underlying database without credentials. A public proof-of-concept exploit exists on GitHub, though EPSS exploitation probability sits at just 0.07% (22nd percentile), reflecting the product's extremely narrow deployment footprint rather than reduced exploitability of the flaw itself.
SQL injection in the login endpoint of Campcodes Online Hotel Reservation System 1.0 enables unauthenticated remote attackers to manipulate the username and password parameters submitted to /admin/index.php, potentially bypassing authentication entirely or extracting the underlying database. A public proof-of-concept exploit is confirmed via GitHub, meaningfully lowering the barrier to attack. Despite the PoC availability, EPSS sits at just 0.07% (21st percentile), consistent with the niche deployment footprint of this PHP educational software rather than suppressed exploitation.
SQL injection in code-projects Vehicle Management 1.0 exposes the `/filter.php` endpoint to remote, unauthenticated database manipulation via the unsanitized `from` parameter. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms no authentication or user interaction is required, and a public proof-of-concept exploit is disclosed on GitHub. Despite the trivial exploitation conditions, EPSS at 0.07% (20th percentile) and absence from the CISA KEV catalog indicate no observed widespread exploitation at time of analysis.
SQL injection in code-projects Vehicle Management 1.0 allows unauthenticated remote attackers to manipulate the `vehicle` parameter in `/filter1.php` to execute arbitrary SQL against the backend database. A public exploit was disclosed on GitHub, and the CVSS 4.0 E:P supplemental metric confirms publicly available exploit code, though EPSS remains low at 0.07% (20th percentile), reflecting the obscure deployment footprint of this educational PHP project. No CISA KEV listing is present, indicating no confirmed widespread active exploitation at time of analysis.
SQL injection in code-projects Vehicle Management 1.0 allows unauthenticated remote attackers to manipulate backend database queries via the unsanitized `from` parameter in /filter2.php. A publicly available proof-of-concept exploit is documented on GitHub, making exploitation trivial against any network-exposed instance. No active exploitation is confirmed in CISA KEV, and the EPSS score of 0.07% (20th percentile) reflects the product's niche deployment footprint rather than low severity - the underlying flaw class is serious but real-world exposure is narrow.
SQL injection in code-projects Vehicle Management 1.0 exposes the `/updatebal.php` endpoint to remote, unauthenticated database manipulation via the unsanitized `company` parameter. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms no authentication or user interaction is required, and a public proof-of-concept is available on GitHub. Despite the reporter's 'critical' classification, the CVSS 4.0 score of 5.5 with limited CIA impact ratings and an EPSS of 0.07% (20th percentile) indicate low observed exploitation activity; real-world risk is further constrained by the product's narrow deployment footprint as a PHP demo/student project.
SQL injection in code-projects Vehicle Management 1.0 allows remote unauthenticated attackers to manipulate the `vehicle` parameter in /addvehicle.php to execute arbitrary SQL against the backend database. The flaw is network-accessible with no authentication required (PR:N, AV:N per CVSS 4.0 vector) and a public proof-of-concept has been disclosed on GitHub. Despite the public exploit and no-auth attack path, EPSS sits at just 0.07% (20th percentile) and this product is absent from CISA KEV, consistent with the application's extremely limited real-world deployment footprint.
SQL injection in code-projects Vehicle Management 1.0 exposes the `/addcompany.php` endpoint to unauthenticated remote attackers who can manipulate the `company` parameter to execute arbitrary SQL queries against the backend database. The vulnerability (CWE-74) is trivially exploitable with no authentication or user interaction required per the CVSS 4.0 vector (PR:N/UI:N/AV:N), and a proof-of-concept has been publicly disclosed on GitHub. While not listed in CISA KEV and carrying a low EPSS score of 0.07%, the public POC elevates opportunistic exploitation risk for any internet-exposed instances.
SQL injection in code-projects Vehicle Management 1.0 exposes the `/print.php` endpoint to remote unauthenticated database manipulation via the unsanitized `sno` parameter. Any attacker with network access to the application can craft malicious HTTP requests to read or modify backend database contents without authentication, as confirmed by the CVSS 4.0 PR:N metric. A public proof-of-concept exploit is available on GitHub, though the EPSS score of 0.07% (20th percentile) indicates limited automated exploitation activity at this time; no CISA KEV listing is present.
SQL injection in code-projects Exam Form Submission 1.0 exposes the application's database to remote manipulation through the credits parameter of /admin/update_s7.php. A public proof-of-concept exploit has been disclosed on GitHub, lowering the bar for exploitation. Despite a network-accessible attack vector with no confirmed authentication barrier, real-world risk is constrained by the product's extremely limited deployment footprint - it is a PHP academic demo project with negligible enterprise presence.
SQL injection in code-projects Exam Form Submission 1.0 allows remote attackers to manipulate the backend database via the `credits` parameter in `/admin/update_s5.php`. The CVSS 4.0 vector assigns PR:N, though the admin-prefixed endpoint path introduces ambiguity about authentication enforcement. A publicly available proof-of-concept exploit exists on GitHub, though EPSS sits at just 0.07% (20th percentile), reflecting limited real-world interest likely tied to the product's narrow deployment footprint. No vendor patch has been identified at time of analysis.
SQL injection in code-projects Intern Membership Management System 1.0 allows unauthenticated remote attackers to manipulate the `user_name` and `password` parameters of the `/student_login.php` login endpoint, injecting arbitrary SQL logic into the backend database query. The flaw (CWE-74) can enable authentication bypass, unauthorized access to intern records, and potential data manipulation. Publicly available exploit code exists on GitHub, though EPSS sits at 0.07% (20th percentile) and the product is absent from CISA KEV, indicating no confirmed widespread exploitation at time of analysis.
Cross-Site Request Forgery in CS-Cart 4.18.3 permits an attacker to silently add arbitrary products to an authenticated user's comparison list by tricking the victim into loading a crafted HTTP request. The impact is confined to unauthorized modification of the comparison list feature - no data exfiltration or account takeover is possible via this vector. No public exploit identified at time of analysis, and the EPSS score of 0.14% (4th percentile) reflects very low real-world exploitation interest.
Unrestricted HTML file upload in CS-Cart 4.18.3 enables stored cross-site scripting and phishing attacks against users of affected storefronts. An attacker who can upload files to the platform may submit a crafted HTML document subsequently served from the trusted store domain, allowing arbitrary JavaScript execution in victims' browsers or presentation of convincing fake login pages for credential harvesting. Publicly available exploit code exists on GitHub; the EPSS score of 0.22% (13th percentile) reflects low observed exploitation pressure and the vulnerability is not listed in the CISA KEV catalog.