PHP
Monthly
SQL injection in Simple Pizza Ordering System 1.0 allows remote attackers to manipulate database queries via the 'ID' parameter of /addpro.php. With no authentication or user interaction required, an attacker can read, modify, or delete data. Exploit code is publicly available but EPSS indicates a low probability of widespread exploitation.
SQL injection in Campcodes Sales and Inventory System 1.0 allows remote unauthenticated attackers to manipulate the 'cid' parameter in /pages/payment_add.php to execute arbitrary SQL commands. A publicly available proof-of-concept exists, but no active exploitation has been reported. Exploitation can lead to unauthorized data access, modification, or deletion.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate database queries via the ID parameter in /admin/manage-foreigners-ticket.php. Public exploit code is available, though no active exploitation has been confirmed by CISA KEV. The low CVSS score (2.1) reflects limited impact and the requirement for low-privilege credentials.
SQL injection in PHPGurukul Zoo Management System 2.1 allows low-privileged authenticated remote attackers to inject malicious SQL via the viewid parameter in /admin/view-normal-ticket.php. Exploit code is publicly available, though no active exploitation has been confirmed and EPSS remains low. The vulnerability carries a low CVSS 4.0 base score (2.1) due to limited impact, but the reporting source rates it as critical.
SQL injection in code-projects Online Hotel Booking 1.0 allows remote attackers to manipulate the 'uname' parameter in /admin/registration.php to extract or modify database contents. The vulnerability is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) and has publicly available exploit code, though EPSS indicates very low exploitation probability (0.05%).
SQL injection in PHPGurukul Student Record System 3.2 allows authenticated low-privilege users to manipulate database queries via the 'session' parameter in /register.php, potentially leading to data theft or modification. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates very low likelihood (0.04%).
SQL injection in PHPGurukul Student Record System 3.2 enables authenticated remote attackers to manipulate database queries via the fmarks2 parameter in /edit-student.php, potentially leading to data exposure or modification. Exploit code is publicly available, but the low EPSS score (0.04%) and required low-privilege authentication limit immediate real-world risk.
Remote SQL injection in PHPGurukul Student Record System 3.2 allows authenticated attackers to manipulate the aemailid parameter via /admin-profile.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation (CISA KEV) or vendor patch has been confirmed at this time.
SQL injection in PHPGurukul Student Record System 3.2 allows authenticated remote attackers to manipulate backend database queries by supplying a crafted value to the `del` parameter in `/manage-students.php`. A public proof-of-concept is available on GitHub (referenced in NVD), enabling potential database enumeration, data exfiltration, or record manipulation against any exposed deployment. Despite the public exploit, EPSS sits at 0.04% (13th percentile), reflecting the product's narrow real-world footprint rather than any technical barrier to exploitation.
SQL injection in the 'del' parameter of /manage-subjects.php in PHPGurukul Student Record System 3.2 allows authenticated, low-privilege remote attackers to manipulate the backend database. Public exploit code is available, though EPSS exploitation probability is low (0.04%) and active exploitation by CISA KEV is not confirmed.
SQL injection in PHPGurukul Student Record System 3.2 via /session.php allows authenticated remote attackers to manipulate the session parameter to execute arbitrary SQL commands, leading to potential data theft or tampering. A public proof-of-concept exploit is available, though no active exploitation has been confirmed. The affected system is a niche academic management platform, reducing widespread risk.
SQL injection in PHPGurukul Old Age Home Management System 1.0 allows authenticated users with low privileges to execute arbitrary SQL commands via the emeradd parameter in /admin/add-scdetails.php. An attacker can
SQL injection in PHPGurukul Old Age Home Management System 1.0 allows remote authenticated attackers with low privileges to manipulate the sertitle parameter in /admin/edit-services.php, potentially leading to unauthorized database access or modification. Public exploit code is available, but there is no evidence of active exploitation in the wild. The vulnerability has a low CVSS 4.0 base score of 2.1, reflecting limited impact and authenticated access requirements.
SQL injection in Car Rental System 1.0 allows remote attackers to manipulate the 'fname' parameter in /book_car.php, leading to unauthorized database access. Publicly available exploit code exists, but no active exploitation or KEV listing has been reported. The vulnerability affects the open-source project from code-projects and carries a low EPSS score, indicating limited real-world targeting.
SQL injection in the login page of Code-projects Car Rental System 1.0 allows unauthenticated remote attackers to inject malicious SQL via the 'uname' parameter, potentially bypassing authentication and compromising the underlying database. Public exploit code is available, but EPSS (0.05%) and product footprint indicate low likelihood of widespread exploitation; no known active exploitation is flagged by CISA KEV.
Unauthenticated SQL injection in the signup endpoint of code-projects Car Rental System 1.0 allows remote attackers to extract or modify database contents via the fname parameter. Exploit code is publicly available, though the EPSS score of 0.05% suggests low current exploitation likelihood.
SQL injection in code-projects Car Rental System 1.0 via the car_name parameter in /admin/add_cars.php allows remote, unauthenticated attackers to manipulate database queries. A public proof-of-concept exploit is available, though EPSS indicates a very low probability of widespread exploitation and no active attacks are confirmed (not in CISA KEV). The vulnerability can lead to unauthorized data access or modification within the database.
SQL injection in Car Rental System 1.0 (PHP) allows manipulation of the /admin/approve.php endpoint by supplying a malicious value to the ID parameter, potentially enabling full database read and write operations. A public proof-of-concept exploit is available on GitHub. Despite the unauthenticated vector assigned in the CVSS data, the endpoint's location under /admin/ raises an unresolved question about whether authentication is actually enforced - a critical detail for defenders assessing real exposure. EPSS sits at 0.05% (14th percentile), consistent with the obscure, niche footprint of this code-projects demo application.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate database queries via the edituserName parameter in /php_action/editUser.php. The exploit is publicly available, but the EPSS score is only 0.05%, indicating low probability of widespread exploitation. No evidence of active exploitation has been reported.
SQL injection in code-projects Inventory Management System 1.0 allows remote, unauthenticated attackers to manipulate the userid parameter in /php_action/removeUser.php, potentially executing arbitrary SQL commands. Publicly available exploit code exists, but the EPSS exploitation probability is low (0.05%). No evidence of active exploitation has been reported.
Unrestricted file upload in code-projects Library System 1.0 allows authenticated remote attackers with low privileges to upload arbitrary files via the image parameter in /add-book.php. A publicly available proof-of-concept exploit exists, potentially enabling remote code execution through webshell upload. EPSS score is low (0.09%), indicating low threat activity despite the ease of exploitation.
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.
A security vulnerability in Daily Expense Manager (CVSS 7.5). High severity vulnerability requiring prompt remediation.
SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.
SQL injection in code-projects Inventory Management System 1.0 allows remote unauthenticated attackers to manipulate the Username parameter in /php_action/createUser.php, leading to unauthorized data access or modification. Public exploit code is available (GitHub issue), but the EPSS exploitation probability is low (0.05%). The vulnerability is classified as critical despite a moderate CVSS base score, and no vendor-released patch has been identified.
SQL injection in Movie Ticketing System 1.0 allows remote attackers with low privileges to manipulate the backend database through the Date parameter of the /ticketConfirmation.php endpoint. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV. The impact is rated low by CVSS, limiting the risk to data exposure or minor data tampering.
SQL injection in code-projects Movie Ticketing System 1.0 via the postName parameter in /logIn.php allows remote attackers to manipulate database queries. The vulnerability has a CVSS 4.0 score of 5.5 with low confidentiality, integrity, and availability impact. A public exploit is available, but there is no evidence of active exploitation.
The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.
SQL injection in PHPGurukul Teachers Record Management System 2.1 allows unauthenticated remote attackers to execute arbitrary SQL commands via the tid parameter in /admin/changeimage.php. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS probability is low (0.05%), indicating limited exploitation likelihood at this time.
SQL injection in PHPGurukul Teachers Record Management System 2.1 allows manipulation of the `tid` parameter in `/admin/edit-teacher-detail.php` to read, modify, or delete database contents. The attack is remotely exploitable and a public proof-of-concept is available on GitHub, though EPSS remains very low at 0.05% (14th percentile), indicating limited real-world targeting to date. No vendor-released patch has been identified at time of analysis.
SQL injection in Staff Audit System 1.0 allows remote attackers with low privileges to execute arbitrary SQL commands via the Search parameter in /search_index.php. A public exploit is available, though EPSS estimates very low exploitation probability (0.04%) and no active exploitation has been confirmed.
SQL injection in Staff Audit System 1.0 enables remote authenticated attackers to manipulate database queries via the updateid argument in /update_index.php. Exploit code is public, though no active exploitation is reported. The vulnerability poses low real-world risk due to limited impact and low EPSS score.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers with low privileges to manipulate the editid parameter in /panel/edit-tax.php to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.
SQL injection in Best Salon Management System 1.0 allows remote attackers to inject SQL via the 'Name' parameter in /panel/add-tax.php. The exploit is publicly available, though real-world risk is limited due to the product's low deployment footprint. EPSS of 0.06% indicates very low probability of active exploitation, and no CISA KEV entry suggests no current in-the-wild use.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated low-privilege users to execute arbitrary SQL via the searchdata parameter in /panel/search-appointment.php. Exploit code is publicly available, but no active exploitation has been confirmed. An attacker with a valid account can read, modify, or delete salon booking data.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate the editid parameter in /panel/edit-category.php, leading to potential data leakage or modification. A public proof-of-concept exploit is available, but no active exploitation is confirmed (EPSS score 0.08%) and the vulnerability is not listed in CISA KEV.
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to manipulate database queries via the 'Name' parameter of /panel/add-category.php. Publicly available exploit code exists, increasing the risk of opportunistic attacks. No active exploitation has been reported in CISA KEV, but the low-complexity flaw can lead to unauthorized data access or modification.
Limited SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the editid parameter in /panel/edit-subscription.php. The vulnerability has a publicly available proof-of-concept exploit and may result in low-impact data access or modification, though no active exploitation has been confirmed by CISA KEV.
SQL injection in Best Salon Management System 1.0 via the user_id/plan_id parameters of /panel/add_subscribe.php allows remote attackers with low-privilege credentials to manipulate database queries, potentially leading to unauthorized data access or modification. A publicly available exploit exists, but no active exploitation has been reported in the wild. The CVSS 4.0 base metrics indicate only limited impact on confidentiality, integrity, and availability.
Unrestricted file upload in SourceCodester Simple Company Website 1.0 permits authenticated users with high privileges to upload arbitrary files via the 'img' parameter in /classes/Users.php, likely resulting in remote code execution if a malicious PHP script is placed in the webroot. A public exploit is available, but no active exploitation is reported.
Unrestricted file upload in Simple Company Website 1.0 allows authenticated administrators to upload arbitrary files via the settings update endpoint, leading to low-impact compromise. The vulnerability has
SQL injection in SourceCodester Simple Company Website 1.0 allows remote attackers to manipulate the login process via the Username parameter in /classes/Login.php. A publicly available proof-of-concept exploit exists, and EPSS indicates a 0.09% probability of exploitation, but no active exploitation campaigns are confirmed.
Unrestricted file upload in SourceCodester Simple Company Website 1.0 allows remote attackers to upload arbitrary files via the img parameter in /classes/Content.php?f=service, potentially leading to code execution. A publicly available exploit exists, though no active exploitation is confirmed. The CVSS vector indicates high privilege requirements, but the presence of an Authentication Bypass tag suggests this may be circumventable.
An SQL injection in Simple Company Website 1.0's admin testimonials management page allows authenticated administrators to execute arbitrary SQL commands. Remotely exploitable, this can lead to limited compromise of database confidentiality, integrity, and availability. Proof-of-concept code is publicly available, though current exploitation probability is low (EPSS 0.08%, no active
SQL injection in SourceCodester Simple Company Website
Authenticated SQL injection in SourceCodester Simple Company Website 1.0 allows remote administrators to execute arbitrary SQL commands via the ID parameter in the admin/services/manage.php endpoint, potentially leading to data manipulation or information disclosure. Exploit code is publicly available, but EPSS indicates very low exploitation probability and no active exploitation is confirmed.
Path traversal in code-projects Simple Forum 1.0 allows authenticated attackers to read arbitrary files via the filename parameter of /forum_downloadfile.php. Exploit code is publicly available, but no active exploitation has been confirmed (not in CISA KEV). CVSS 4.0 base score is 2.1 (Low), reflecting limited impact on confidentiality only.
Cross-site request forgery vulnerability in DaiCuo CMS up to version 1.3.13 allows remote attackers to perform unintended actions on behalf of authenticated administrators by tricking them into clicking a malicious link while logged into the application. The exploit is publicly available, and affected installations may be manipulated via the /admin.php/addon/index endpoint. No active exploitation has been confirmed by CISA KEV, and EPSS score indicates low exploitation probability (0.08%).
Cross-site request forgery in SeaCMS admin panel (/admin_type.php) allows remote attackers to trick authenticated administrators into performing unintended actions. All versions up to 13.2 are affected. A public exploit is available, but the vulnerability is not known to be actively exploited; EPSS probability is very low (0.06%).
SQL injection in PHPGurukul Local Services Search Engine Management System 2.1 enables remote unauthenticated attackers to inject arbitrary SQL commands via the editid parameter in /admin/edit-category-detail.php, potentially allowing unauthorized database access or modification. A publicly available proof-of-concept exists, but real-world exploitation remains minimal with EPSS at 0.06% (18th percentile), indicating the vulnerable application has extremely limited deployment footprint despite the publicly disclosed vulnerability.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to manipulate the editid parameter in /panel/edit_plan.php, leading to unauthorized database access or modification. Publicly available exploit code exists, but EPSS estimates a low 0.06% likelihood of exploitation, and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via plan_name, description, duration_days, and price parameters in /panel/add_plan.php. An attacker with low-privileged access can extract or modify data through publicly available exploit code, though no active exploitation has been confirmed.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate database queries via the fromdate/todate parameters in /panel/staff_commision.php. Public exploit code exists, but no active exploitation is confirmed. The CVSS 4.0 base score is 2.1 (Low), though the reporter assigns a critical severity, likely due to different scoring versions.
SQL injection in Best Salon Management System 1.0 via the /panel/pro_s
Remote SQL injection in code-projects Simple Forum 1.0 allows authenticated low-privilege attackers to read, modify, or delete database contents via the File parameter in /forum1.php. Exploit code is publicly available but no active exploitation has been reported; EPSS indicates very low exploitation probability.
Cross-site scripting in code-projects Simple Forum 1.0 allows a low-privileged remote attacker to inject arbitrary JavaScript via the /forum_edit1.php text parameter. The attack can be carried out by an authenticated user and executes when another user views the manipulated page. Public exploit code is available, but EPSS data indicates very low exploitation probability.
Unrestricted file upload in Simple Forum 1.0 allows remote authenticated attackers to upload arbitrary files via the File parameter in /forum1.php. Public exploit code is available, enabling low-privileged users to potentially place malicious scripts on the server.
SQL injection in Simple Forum 1.0 allows remote attackers to manipulate the 'iii' parameter in /forum_edit.php, potentially leading to unauthorized database access. A public proof-of-concept exploit exists, though no active exploitation has been confirmed. The vulnerability affects an open-source PHP forum application.
Remote SQL injection in Simple Forum 1.0 allows unauthenticated attackers to execute arbitrary SQL commands via the 'Name' parameter in /forum_viewfile.php. Public exploit code exists but no active exploitation is known; EPSS score is very low (0.04%) indicating limited real-world targeting despite high technical impact potential.
SQL injection in Simple Forum 1.0 allows remote attackers to execute arbitrary SQL queries via the User parameter in /register1.php. A public exploit is available on GitHub, increasing the likelihood of targeted attacks, though the EPSS score is low at 0.06% indicating limited active exploitation at present.
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all versions up to, and including, 5.25.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
SQL injection in Simple Forum 1.0's signin.php allows remote attackers to manipulate the User parameter, potentially leading to unauthorized data access or modification. The vulnerability is publicly disclosed with exploit code available, though EPSS scoring indicates low immediate exploitation probability.
Unrestricted file upload in Simple Photo Gallery 1.0 allows remote attackers to upload malicious PHP files via the /upload-photo.php endpoint without authentication, enabling remote code execution on the web server. Although exploit code is publicly available, the EPSS score (0.12%) is low, and no active exploitation is reported—real-world risk appears limited by the application's niche deployment.
Authenticated SQL injection in Product Inventory System 1.0 via the ID parameter in /admin/edit_user.php allows high-privilege attackers to execute arbitrary SQL commands. A public proof-of-concept is available, but the very low EPSS score (0.06%) and absence of KEV listing indicate negligible real-world exploitation risk.
SQL injection in Product Inventory System 1.0 allows remote authenticated attackers with administrative privileges to modify database records via the ID parameter in /admin/edit_product.php. Exploit code is publicly available, but no evidence of active exploitation; the EPSS score is very low (0.06%), suggesting limited real-world risk at this time.
SQL injection in the login endpoint of code-projects Product Inventory System 1.0 allows remote attackers to manipulate the Username parameter. This can lead to authentication bypass, data leakage, or database tampering. Exploit code is publicly available, but no active exploitation campaign has been confirmed.
Backdoor in Conjure Position Department Service Quality Evaluation System allows remote authenticated users with low privileges to execute arbitrary code via a crafted payload to the eval function in a PHP mixin file. A public proof-of-concept exploit exists, but EPSS probability is low (0.08%) and no active exploitation has been confirmed. The CVSS score (2.1) and vector indicate low impact, contradicting the 'critical' classification in the description.
Unrestricted file upload in code-projects Library System 1.0's /profile.php allows authenticated remote attackers with low privileges to upload arbitrary files, likely resulting in remote code execution. Exploit code is publicly available, but active exploitation is not confirmed (no CISA KEV listing) and EPSS predicts a low exploitation probability (0.11%).
SQL injection in code-projects Library System 1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the phone parameter in /profile.php. The vulnerability has a publicly available proof-of-concept, though no active exploitation is confirmed and EPSS estimates low short-term exploitation probability (0.06%). Impact is limited per CVSS scoring, primarily posing a risk of data theft or tampering.
SQL injection in Code-Projects Library System 1.0 allows remote unauthenticated attackers to manipulate database queries via the 'reg' parameter in /student-issue-book.php. Public exploit code is available, enabling potential data tampering or unauthorized access. Despite a network attack vector, CVSS 4.0 rates overall severity as medium (5.5) due to limited impact.
SQL injection in Inventory Management System 1.0 allows unauthorized database manipulation via the orderId parameter. An unauthenticated remote attacker can exploit the /php_action/editPayment.php endpoint to execute arbitrary SQL statements. Public exploit code is available, though no active exploitation has been confirmed, and the EPSS probability is low.
Unauthenticated SQL injection in code-projects Inventory Management System 1.0 exposes the /orders.php endpoint to remote database manipulation via the `i` parameter, which is passed to a SQL query without sanitization. Any attacker with HTTP access to the application can read, modify, or delete inventory and order records stored in the backend database. A public proof-of-concept exploit has been disclosed via a GitHub issue, lowering the bar for exploitation despite a low EPSS score.
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI.
SQL injection in code-projects Inventory Management System 1.0 allows unauthenticated remote attackers to manipulate database queries via the editOrder.php file. Public exploit code exists, though EPSS indicates low exploitation probability (0.06%) and no active exploitation has been confirmed.
SQL injection in code-projects Payroll Management System 1.0 via the ID parameter in /ajax.php?action=save_department allows remote attackers to execute arbitrary SQL commands, potentially compromising backend database content. A public proof-of-concept exploit is available, but no active exploitation has been confirmed (EPSS 0.06%).
SQL injection in Inventory Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the editProductName parameter in /php_action/editProduct.php. A public proof-of-concept exploit exists, but no active exploitation has been confirmed. The vulnerability has a medium CVSS 4.0 score and low EPSS likelihood, indicating limited practical risk outside of exposed installations.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the productId parameter in /php_action/removeProduct.php. An unauthenticated attacker can potentially access or modify database contents, though impact is rated low. A public proof-of-concept exists, but EPSS indicates low exploitation probability.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate database queries via the /php_action/createOrder.php endpoint. Exploit code is publicly available, but no active exploitation has been confirmed. The issue affects a niche open-source project with limited real-world deployment, resulting in low overall risk despite easy exploitability.
SQL injection in code-projects Inventory Management System 1.0 allows remote unauthenticated attackers to interfere with database queries via the productName parameter in /php_action/createProduct.php. Exploit code is publicly available, though the EPSS score of 0.06% indicates a low probability of widespread exploitation at this time.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate the brandId parameter in removeBrand.php, potentially leading to unauthorized data access or modification. Exploit code is publicly available but no active exploitation has been confirmed, and EPSS risk is low.
The MicroPayments - Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the adminOptions() function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxDeleteTheme() function in all versions up to, and including, 1.3.0. This makes it possible for Subscriber-level attackers to add arbitrary file paths (such as ../../../../wp-config.php) to the themeNameId parameter of the AJAX request, which can lead to remote code execution.
The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.
The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.
The WP VR - 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’ parameter in all versions up to, and including, 8.5.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Stored cross-site scripting (XSS) in code-projects Food Distributor Site 1.0 allows an authenticated administrator to inject arbitrary JavaScript into site settings. The vulnerability is triggered via the site_phone, site_email, or address parameters in the /admin/save_settings.php endpoint. Public exploit code is available, but the high privilege requirement (administrator access) and low EPSS score (0.07%) limit real-world risk.
SQL injection in Simple Pizza Ordering System 1.0 allows remote attackers to manipulate database queries via the 'ID' parameter of /addpro.php. With no authentication or user interaction required, an attacker can read, modify, or delete data. Exploit code is publicly available but EPSS indicates a low probability of widespread exploitation.
SQL injection in Campcodes Sales and Inventory System 1.0 allows remote unauthenticated attackers to manipulate the 'cid' parameter in /pages/payment_add.php to execute arbitrary SQL commands. A publicly available proof-of-concept exists, but no active exploitation has been reported. Exploitation can lead to unauthorized data access, modification, or deletion.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate database queries via the ID parameter in /admin/manage-foreigners-ticket.php. Public exploit code is available, though no active exploitation has been confirmed by CISA KEV. The low CVSS score (2.1) reflects limited impact and the requirement for low-privilege credentials.
SQL injection in PHPGurukul Zoo Management System 2.1 allows low-privileged authenticated remote attackers to inject malicious SQL via the viewid parameter in /admin/view-normal-ticket.php. Exploit code is publicly available, though no active exploitation has been confirmed and EPSS remains low. The vulnerability carries a low CVSS 4.0 base score (2.1) due to limited impact, but the reporting source rates it as critical.
SQL injection in code-projects Online Hotel Booking 1.0 allows remote attackers to manipulate the 'uname' parameter in /admin/registration.php to extract or modify database contents. The vulnerability is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) and has publicly available exploit code, though EPSS indicates very low exploitation probability (0.05%).
SQL injection in PHPGurukul Student Record System 3.2 allows authenticated low-privilege users to manipulate database queries via the 'session' parameter in /register.php, potentially leading to data theft or modification. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates very low likelihood (0.04%).
SQL injection in PHPGurukul Student Record System 3.2 enables authenticated remote attackers to manipulate database queries via the fmarks2 parameter in /edit-student.php, potentially leading to data exposure or modification. Exploit code is publicly available, but the low EPSS score (0.04%) and required low-privilege authentication limit immediate real-world risk.
Remote SQL injection in PHPGurukul Student Record System 3.2 allows authenticated attackers to manipulate the aemailid parameter via /admin-profile.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation (CISA KEV) or vendor patch has been confirmed at this time.
SQL injection in PHPGurukul Student Record System 3.2 allows authenticated remote attackers to manipulate backend database queries by supplying a crafted value to the `del` parameter in `/manage-students.php`. A public proof-of-concept is available on GitHub (referenced in NVD), enabling potential database enumeration, data exfiltration, or record manipulation against any exposed deployment. Despite the public exploit, EPSS sits at 0.04% (13th percentile), reflecting the product's narrow real-world footprint rather than any technical barrier to exploitation.
SQL injection in the 'del' parameter of /manage-subjects.php in PHPGurukul Student Record System 3.2 allows authenticated, low-privilege remote attackers to manipulate the backend database. Public exploit code is available, though EPSS exploitation probability is low (0.04%) and active exploitation by CISA KEV is not confirmed.
SQL injection in PHPGurukul Student Record System 3.2 via /session.php allows authenticated remote attackers to manipulate the session parameter to execute arbitrary SQL commands, leading to potential data theft or tampering. A public proof-of-concept exploit is available, though no active exploitation has been confirmed. The affected system is a niche academic management platform, reducing widespread risk.
SQL injection in PHPGurukul Old Age Home Management System 1.0 allows authenticated users with low privileges to execute arbitrary SQL commands via the emeradd parameter in /admin/add-scdetails.php. An attacker can
SQL injection in PHPGurukul Old Age Home Management System 1.0 allows remote authenticated attackers with low privileges to manipulate the sertitle parameter in /admin/edit-services.php, potentially leading to unauthorized database access or modification. Public exploit code is available, but there is no evidence of active exploitation in the wild. The vulnerability has a low CVSS 4.0 base score of 2.1, reflecting limited impact and authenticated access requirements.
SQL injection in Car Rental System 1.0 allows remote attackers to manipulate the 'fname' parameter in /book_car.php, leading to unauthorized database access. Publicly available exploit code exists, but no active exploitation or KEV listing has been reported. The vulnerability affects the open-source project from code-projects and carries a low EPSS score, indicating limited real-world targeting.
SQL injection in the login page of Code-projects Car Rental System 1.0 allows unauthenticated remote attackers to inject malicious SQL via the 'uname' parameter, potentially bypassing authentication and compromising the underlying database. Public exploit code is available, but EPSS (0.05%) and product footprint indicate low likelihood of widespread exploitation; no known active exploitation is flagged by CISA KEV.
Unauthenticated SQL injection in the signup endpoint of code-projects Car Rental System 1.0 allows remote attackers to extract or modify database contents via the fname parameter. Exploit code is publicly available, though the EPSS score of 0.05% suggests low current exploitation likelihood.
SQL injection in code-projects Car Rental System 1.0 via the car_name parameter in /admin/add_cars.php allows remote, unauthenticated attackers to manipulate database queries. A public proof-of-concept exploit is available, though EPSS indicates a very low probability of widespread exploitation and no active attacks are confirmed (not in CISA KEV). The vulnerability can lead to unauthorized data access or modification within the database.
SQL injection in Car Rental System 1.0 (PHP) allows manipulation of the /admin/approve.php endpoint by supplying a malicious value to the ID parameter, potentially enabling full database read and write operations. A public proof-of-concept exploit is available on GitHub. Despite the unauthenticated vector assigned in the CVSS data, the endpoint's location under /admin/ raises an unresolved question about whether authentication is actually enforced - a critical detail for defenders assessing real exposure. EPSS sits at 0.05% (14th percentile), consistent with the obscure, niche footprint of this code-projects demo application.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate database queries via the edituserName parameter in /php_action/editUser.php. The exploit is publicly available, but the EPSS score is only 0.05%, indicating low probability of widespread exploitation. No evidence of active exploitation has been reported.
SQL injection in code-projects Inventory Management System 1.0 allows remote, unauthenticated attackers to manipulate the userid parameter in /php_action/removeUser.php, potentially executing arbitrary SQL commands. Publicly available exploit code exists, but the EPSS exploitation probability is low (0.05%). No evidence of active exploitation has been reported.
Unrestricted file upload in code-projects Library System 1.0 allows authenticated remote attackers with low privileges to upload arbitrary files via the image parameter in /add-book.php. A publicly available proof-of-concept exploit exists, potentially enabling remote code execution through webshell upload. EPSS score is low (0.09%), indicating low threat activity despite the ease of exploitation.
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.
A security vulnerability in Daily Expense Manager (CVSS 7.5). High severity vulnerability requiring prompt remediation.
SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.
SQL injection in code-projects Inventory Management System 1.0 allows remote unauthenticated attackers to manipulate the Username parameter in /php_action/createUser.php, leading to unauthorized data access or modification. Public exploit code is available (GitHub issue), but the EPSS exploitation probability is low (0.05%). The vulnerability is classified as critical despite a moderate CVSS base score, and no vendor-released patch has been identified.
SQL injection in Movie Ticketing System 1.0 allows remote attackers with low privileges to manipulate the backend database through the Date parameter of the /ticketConfirmation.php endpoint. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV. The impact is rated low by CVSS, limiting the risk to data exposure or minor data tampering.
SQL injection in code-projects Movie Ticketing System 1.0 via the postName parameter in /logIn.php allows remote attackers to manipulate database queries. The vulnerability has a CVSS 4.0 score of 5.5 with low confidentiality, integrity, and availability impact. A public exploit is available, but there is no evidence of active exploitation.
The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.
SQL injection in PHPGurukul Teachers Record Management System 2.1 allows unauthenticated remote attackers to execute arbitrary SQL commands via the tid parameter in /admin/changeimage.php. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS probability is low (0.05%), indicating limited exploitation likelihood at this time.
SQL injection in PHPGurukul Teachers Record Management System 2.1 allows manipulation of the `tid` parameter in `/admin/edit-teacher-detail.php` to read, modify, or delete database contents. The attack is remotely exploitable and a public proof-of-concept is available on GitHub, though EPSS remains very low at 0.05% (14th percentile), indicating limited real-world targeting to date. No vendor-released patch has been identified at time of analysis.
SQL injection in Staff Audit System 1.0 allows remote attackers with low privileges to execute arbitrary SQL commands via the Search parameter in /search_index.php. A public exploit is available, though EPSS estimates very low exploitation probability (0.04%) and no active exploitation has been confirmed.
SQL injection in Staff Audit System 1.0 enables remote authenticated attackers to manipulate database queries via the updateid argument in /update_index.php. Exploit code is public, though no active exploitation is reported. The vulnerability poses low real-world risk due to limited impact and low EPSS score.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers with low privileges to manipulate the editid parameter in /panel/edit-tax.php to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.
SQL injection in Best Salon Management System 1.0 allows remote attackers to inject SQL via the 'Name' parameter in /panel/add-tax.php. The exploit is publicly available, though real-world risk is limited due to the product's low deployment footprint. EPSS of 0.06% indicates very low probability of active exploitation, and no CISA KEV entry suggests no current in-the-wild use.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated low-privilege users to execute arbitrary SQL via the searchdata parameter in /panel/search-appointment.php. Exploit code is publicly available, but no active exploitation has been confirmed. An attacker with a valid account can read, modify, or delete salon booking data.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate the editid parameter in /panel/edit-category.php, leading to potential data leakage or modification. A public proof-of-concept exploit is available, but no active exploitation is confirmed (EPSS score 0.08%) and the vulnerability is not listed in CISA KEV.
SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to manipulate database queries via the 'Name' parameter of /panel/add-category.php. Publicly available exploit code exists, increasing the risk of opportunistic attacks. No active exploitation has been reported in CISA KEV, but the low-complexity flaw can lead to unauthorized data access or modification.
Limited SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the editid parameter in /panel/edit-subscription.php. The vulnerability has a publicly available proof-of-concept exploit and may result in low-impact data access or modification, though no active exploitation has been confirmed by CISA KEV.
SQL injection in Best Salon Management System 1.0 via the user_id/plan_id parameters of /panel/add_subscribe.php allows remote attackers with low-privilege credentials to manipulate database queries, potentially leading to unauthorized data access or modification. A publicly available exploit exists, but no active exploitation has been reported in the wild. The CVSS 4.0 base metrics indicate only limited impact on confidentiality, integrity, and availability.
Unrestricted file upload in SourceCodester Simple Company Website 1.0 permits authenticated users with high privileges to upload arbitrary files via the 'img' parameter in /classes/Users.php, likely resulting in remote code execution if a malicious PHP script is placed in the webroot. A public exploit is available, but no active exploitation is reported.
Unrestricted file upload in Simple Company Website 1.0 allows authenticated administrators to upload arbitrary files via the settings update endpoint, leading to low-impact compromise. The vulnerability has
SQL injection in SourceCodester Simple Company Website 1.0 allows remote attackers to manipulate the login process via the Username parameter in /classes/Login.php. A publicly available proof-of-concept exploit exists, and EPSS indicates a 0.09% probability of exploitation, but no active exploitation campaigns are confirmed.
Unrestricted file upload in SourceCodester Simple Company Website 1.0 allows remote attackers to upload arbitrary files via the img parameter in /classes/Content.php?f=service, potentially leading to code execution. A publicly available exploit exists, though no active exploitation is confirmed. The CVSS vector indicates high privilege requirements, but the presence of an Authentication Bypass tag suggests this may be circumventable.
An SQL injection in Simple Company Website 1.0's admin testimonials management page allows authenticated administrators to execute arbitrary SQL commands. Remotely exploitable, this can lead to limited compromise of database confidentiality, integrity, and availability. Proof-of-concept code is publicly available, though current exploitation probability is low (EPSS 0.08%, no active
SQL injection in SourceCodester Simple Company Website
Authenticated SQL injection in SourceCodester Simple Company Website 1.0 allows remote administrators to execute arbitrary SQL commands via the ID parameter in the admin/services/manage.php endpoint, potentially leading to data manipulation or information disclosure. Exploit code is publicly available, but EPSS indicates very low exploitation probability and no active exploitation is confirmed.
Path traversal in code-projects Simple Forum 1.0 allows authenticated attackers to read arbitrary files via the filename parameter of /forum_downloadfile.php. Exploit code is publicly available, but no active exploitation has been confirmed (not in CISA KEV). CVSS 4.0 base score is 2.1 (Low), reflecting limited impact on confidentiality only.
Cross-site request forgery vulnerability in DaiCuo CMS up to version 1.3.13 allows remote attackers to perform unintended actions on behalf of authenticated administrators by tricking them into clicking a malicious link while logged into the application. The exploit is publicly available, and affected installations may be manipulated via the /admin.php/addon/index endpoint. No active exploitation has been confirmed by CISA KEV, and EPSS score indicates low exploitation probability (0.08%).
Cross-site request forgery in SeaCMS admin panel (/admin_type.php) allows remote attackers to trick authenticated administrators into performing unintended actions. All versions up to 13.2 are affected. A public exploit is available, but the vulnerability is not known to be actively exploited; EPSS probability is very low (0.06%).
SQL injection in PHPGurukul Local Services Search Engine Management System 2.1 enables remote unauthenticated attackers to inject arbitrary SQL commands via the editid parameter in /admin/edit-category-detail.php, potentially allowing unauthorized database access or modification. A publicly available proof-of-concept exists, but real-world exploitation remains minimal with EPSS at 0.06% (18th percentile), indicating the vulnerable application has extremely limited deployment footprint despite the publicly disclosed vulnerability.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to manipulate the editid parameter in /panel/edit_plan.php, leading to unauthorized database access or modification. Publicly available exploit code exists, but EPSS estimates a low 0.06% likelihood of exploitation, and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via plan_name, description, duration_days, and price parameters in /panel/add_plan.php. An attacker with low-privileged access can extract or modify data through publicly available exploit code, though no active exploitation has been confirmed.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate database queries via the fromdate/todate parameters in /panel/staff_commision.php. Public exploit code exists, but no active exploitation is confirmed. The CVSS 4.0 base score is 2.1 (Low), though the reporter assigns a critical severity, likely due to different scoring versions.
SQL injection in Best Salon Management System 1.0 via the /panel/pro_s
Remote SQL injection in code-projects Simple Forum 1.0 allows authenticated low-privilege attackers to read, modify, or delete database contents via the File parameter in /forum1.php. Exploit code is publicly available but no active exploitation has been reported; EPSS indicates very low exploitation probability.
Cross-site scripting in code-projects Simple Forum 1.0 allows a low-privileged remote attacker to inject arbitrary JavaScript via the /forum_edit1.php text parameter. The attack can be carried out by an authenticated user and executes when another user views the manipulated page. Public exploit code is available, but EPSS data indicates very low exploitation probability.
Unrestricted file upload in Simple Forum 1.0 allows remote authenticated attackers to upload arbitrary files via the File parameter in /forum1.php. Public exploit code is available, enabling low-privileged users to potentially place malicious scripts on the server.
SQL injection in Simple Forum 1.0 allows remote attackers to manipulate the 'iii' parameter in /forum_edit.php, potentially leading to unauthorized database access. A public proof-of-concept exploit exists, though no active exploitation has been confirmed. The vulnerability affects an open-source PHP forum application.
Remote SQL injection in Simple Forum 1.0 allows unauthenticated attackers to execute arbitrary SQL commands via the 'Name' parameter in /forum_viewfile.php. Public exploit code exists but no active exploitation is known; EPSS score is very low (0.04%) indicating limited real-world targeting despite high technical impact potential.
SQL injection in Simple Forum 1.0 allows remote attackers to execute arbitrary SQL queries via the User parameter in /register1.php. A public exploit is available on GitHub, increasing the likelihood of targeted attacks, though the EPSS score is low at 0.06% indicating limited active exploitation at present.
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all versions up to, and including, 5.25.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
SQL injection in Simple Forum 1.0's signin.php allows remote attackers to manipulate the User parameter, potentially leading to unauthorized data access or modification. The vulnerability is publicly disclosed with exploit code available, though EPSS scoring indicates low immediate exploitation probability.
Unrestricted file upload in Simple Photo Gallery 1.0 allows remote attackers to upload malicious PHP files via the /upload-photo.php endpoint without authentication, enabling remote code execution on the web server. Although exploit code is publicly available, the EPSS score (0.12%) is low, and no active exploitation is reported—real-world risk appears limited by the application's niche deployment.
Authenticated SQL injection in Product Inventory System 1.0 via the ID parameter in /admin/edit_user.php allows high-privilege attackers to execute arbitrary SQL commands. A public proof-of-concept is available, but the very low EPSS score (0.06%) and absence of KEV listing indicate negligible real-world exploitation risk.
SQL injection in Product Inventory System 1.0 allows remote authenticated attackers with administrative privileges to modify database records via the ID parameter in /admin/edit_product.php. Exploit code is publicly available, but no evidence of active exploitation; the EPSS score is very low (0.06%), suggesting limited real-world risk at this time.
SQL injection in the login endpoint of code-projects Product Inventory System 1.0 allows remote attackers to manipulate the Username parameter. This can lead to authentication bypass, data leakage, or database tampering. Exploit code is publicly available, but no active exploitation campaign has been confirmed.
Backdoor in Conjure Position Department Service Quality Evaluation System allows remote authenticated users with low privileges to execute arbitrary code via a crafted payload to the eval function in a PHP mixin file. A public proof-of-concept exploit exists, but EPSS probability is low (0.08%) and no active exploitation has been confirmed. The CVSS score (2.1) and vector indicate low impact, contradicting the 'critical' classification in the description.
Unrestricted file upload in code-projects Library System 1.0's /profile.php allows authenticated remote attackers with low privileges to upload arbitrary files, likely resulting in remote code execution. Exploit code is publicly available, but active exploitation is not confirmed (no CISA KEV listing) and EPSS predicts a low exploitation probability (0.11%).
SQL injection in code-projects Library System 1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the phone parameter in /profile.php. The vulnerability has a publicly available proof-of-concept, though no active exploitation is confirmed and EPSS estimates low short-term exploitation probability (0.06%). Impact is limited per CVSS scoring, primarily posing a risk of data theft or tampering.
SQL injection in Code-Projects Library System 1.0 allows remote unauthenticated attackers to manipulate database queries via the 'reg' parameter in /student-issue-book.php. Public exploit code is available, enabling potential data tampering or unauthorized access. Despite a network attack vector, CVSS 4.0 rates overall severity as medium (5.5) due to limited impact.
SQL injection in Inventory Management System 1.0 allows unauthorized database manipulation via the orderId parameter. An unauthenticated remote attacker can exploit the /php_action/editPayment.php endpoint to execute arbitrary SQL statements. Public exploit code is available, though no active exploitation has been confirmed, and the EPSS probability is low.
Unauthenticated SQL injection in code-projects Inventory Management System 1.0 exposes the /orders.php endpoint to remote database manipulation via the `i` parameter, which is passed to a SQL query without sanitization. Any attacker with HTTP access to the application can read, modify, or delete inventory and order records stored in the backend database. A public proof-of-concept exploit has been disclosed via a GitHub issue, lowering the bar for exploitation despite a low EPSS score.
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI.
SQL injection in code-projects Inventory Management System 1.0 allows unauthenticated remote attackers to manipulate database queries via the editOrder.php file. Public exploit code exists, though EPSS indicates low exploitation probability (0.06%) and no active exploitation has been confirmed.
SQL injection in code-projects Payroll Management System 1.0 via the ID parameter in /ajax.php?action=save_department allows remote attackers to execute arbitrary SQL commands, potentially compromising backend database content. A public proof-of-concept exploit is available, but no active exploitation has been confirmed (EPSS 0.06%).
SQL injection in Inventory Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the editProductName parameter in /php_action/editProduct.php. A public proof-of-concept exploit exists, but no active exploitation has been confirmed. The vulnerability has a medium CVSS 4.0 score and low EPSS likelihood, indicating limited practical risk outside of exposed installations.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the productId parameter in /php_action/removeProduct.php. An unauthenticated attacker can potentially access or modify database contents, though impact is rated low. A public proof-of-concept exists, but EPSS indicates low exploitation probability.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate database queries via the /php_action/createOrder.php endpoint. Exploit code is publicly available, but no active exploitation has been confirmed. The issue affects a niche open-source project with limited real-world deployment, resulting in low overall risk despite easy exploitability.
SQL injection in code-projects Inventory Management System 1.0 allows remote unauthenticated attackers to interfere with database queries via the productName parameter in /php_action/createProduct.php. Exploit code is publicly available, though the EPSS score of 0.06% indicates a low probability of widespread exploitation at this time.
SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate the brandId parameter in removeBrand.php, potentially leading to unauthorized data access or modification. Exploit code is publicly available but no active exploitation has been confirmed, and EPSS risk is low.
The MicroPayments - Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the adminOptions() function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxDeleteTheme() function in all versions up to, and including, 1.3.0. This makes it possible for Subscriber-level attackers to add arbitrary file paths (such as ../../../../wp-config.php) to the themeNameId parameter of the AJAX request, which can lead to remote code execution.
The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.
The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.
The WP VR - 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’ parameter in all versions up to, and including, 8.5.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Stored cross-site scripting (XSS) in code-projects Food Distributor Site 1.0 allows an authenticated administrator to inject arbitrary JavaScript into site settings. The vulnerability is triggered via the site_phone, site_email, or address parameters in the /admin/save_settings.php endpoint. Public exploit code is available, but the high privilege requirement (administrator access) and low EPSS score (0.07%) limit real-world risk.