Crime Reporting System
Monthly
SQL injection in code-projects Crime Reporting System 1.0 allows remote attackers to inject arbitrary SQL via the email parameter of /headlogin.php. A public exploit exists but active exploitation is not confirmed; the EPSS probability is very low (0.07%). This vulnerability can lead to limited data exposure or manipulation.
SQL injection in code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to manipulate database queries via the email parameter of /policelogin.php, potentially leading to authentication bypass and sensitive data exposure. Exploit code is publicly available, but no active exploitation has been confirmed (not in CISA KEV). EPSS indicates very low risk of widespread exploitation (0.06%, 19th percentile).
SQL injection in the registration form of Code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to manipulate database queries by injecting SQL into the Name parameter. The exploit is publicly available but not currently listed in CISA KEV, and EPSS probability of exploitation remains low (0.06%). Although the vulnerability is trivial to exploit, the intrinsic impact is limited, affecting only the local database with low confidentiality, integrity, and availability repercussions.
SQL injection in code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the 'location' parameter of /complainer_page.php. A public exploit is available, though EPSS indicates extremely low likelihood of widespread exploitation and no active attacks are confirmed.
SQL injection in Crime Reporting System 1.0 allows remote unauthenticated attackers to manipulate database queries via the email parameter on the /userlogin.php page. The vulnerability has been publicly disclosed and exploit code is available, although the EPSS score is low (0.06%) and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
A vulnerability was found in code-projects Crime Reporting System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in code-projects Crime Reporting System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQL injection in code-projects Crime Reporting System 1.0 allows remote attackers to inject arbitrary SQL via the email parameter of /headlogin.php. A public exploit exists but active exploitation is not confirmed; the EPSS probability is very low (0.07%). This vulnerability can lead to limited data exposure or manipulation.
SQL injection in code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to manipulate database queries via the email parameter of /policelogin.php, potentially leading to authentication bypass and sensitive data exposure. Exploit code is publicly available, but no active exploitation has been confirmed (not in CISA KEV). EPSS indicates very low risk of widespread exploitation (0.06%, 19th percentile).
SQL injection in the registration form of Code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to manipulate database queries by injecting SQL into the Name parameter. The exploit is publicly available but not currently listed in CISA KEV, and EPSS probability of exploitation remains low (0.06%). Although the vulnerability is trivial to exploit, the intrinsic impact is limited, affecting only the local database with low confidentiality, integrity, and availability repercussions.
SQL injection in code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the 'location' parameter of /complainer_page.php. A public exploit is available, though EPSS indicates extremely low likelihood of widespread exploitation and no active attacks are confirmed.
SQL injection in Crime Reporting System 1.0 allows remote unauthenticated attackers to manipulate database queries via the email parameter on the /userlogin.php page. The vulnerability has been publicly disclosed and exploit code is available, although the EPSS score is low (0.06%) and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
A vulnerability was found in code-projects Crime Reporting System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in code-projects Crime Reporting System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.