SQL Injection

Blind SQL injection in the Cool fade popup WordPress plugin allows authenticated low-privilege attackers to extract sensitive data from the database. The vulnerability affects all versions up to 10.1. Exploitation requires only subscriber-level access and no user interaction, making it easily exploitable once authenticated, though EPSS score is low (0.04%) and no public exploit or active exploitation is known.

SQL injection in the cybio Gallery Widget plugin for WordPress up to version 1.2.1 allows authenticated attackers with low privileges (e.g., Subscriber) to extract sensitive database information and cause limited availability disruptions. No active exploitation or public exploit is known, and the EPSS exploitation probability is very low (0.04%).

SQL injection in the Contact Us page – Contact people LITE WordPress plugin allows authenticated low-privileged users to extract sensitive data from the WordPress database. Versions through 3.7.4 are affected; an attacker needs a valid subscriber-level (or higher) account to exploit it. EPSS probability is very low, and no active exploitation or public exploit code has been identified.

SQL injection vulnerability in the All In One Slider Responsive WordPress plugin allows unauthenticated attackers to read sensitive data from the database. The flaw affects all versions through 3.7.9 and requires no special conditions. No active exploitation or public exploit code has been identified, and the EPSS score is low (0.04%), indicating minimal real-world risk.

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints. [CVSS 5.4 MEDIUM]

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content.

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsa_pro_id’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion which leads to Remote Code Execution in all versions up to, and including, 4.89. This is due to the presence of a SQL Injection vulnerability and Local File Inclusion vulnerability that can be chained with an image upload. This makes it possible for unauthenticated attackers to execute code on the server upload image files on the server than can be fetched via a SQL injection vulnerability, and ultimately executed as PHP code through the local file inclusion vulnerability.

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘$id’ variable of the getSpace() function in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

SQL injection in Campcodes Employee Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQL via the ID parameter in /myprofile.php, potentially leading to data theft or manipulation. A proof-of-concept exploit is publicly available, but the EPSS score is very low (0.06%) and no active exploitation has been reported.

SQL injection in Campcodes Employee Management System 1.0 allows remote unauthenticated attackers to manipulate database queries via the ID parameter in /myprofileup.php. A public proof-of-concept exploit is available, but the EPSS score of 0.06% indicates low probability of widespread exploitation and no active exploitation has been confirmed.

SQL injection in Campcodes Employee Management System 1.0 via the ID parameter in /mark.php allows remote attackers to execute arbitrary SQL commands. Exploit code is publicly available, but no active exploitation is confirmed (not listed in CISA KEV). The vulnerability affects version 1.0.

SQL injection in Campcodes Employee Management System 1.0 allows remote attackers to manipulate the database via the ID parameter of the empproject.php endpoint, potentially exposing or modifying employee data. A public proof-of-concept exploit is available, but the EPSS exploitation probability is very low (0.06%), and there is no evidence of active exploitation (not listed in CISA KEV).

SQL injection in Campcodes Employee Management System 1.0 allows remote attackers to manipulate the database via the 'ID' parameter in /eloginwel.php. A publicly disclosed exploit exists, but no evidence of active exploitation in the wild. The vulnerability has a low EPSS score (0.06%) and a CVSS 4.0 base score of 5.5, indicating limited impact to confidentiality, integrity, and availability.

SQL injection in Campcodes Employee Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in /edit.php. Exploit code is publicly available, though no active exploitation has been confirmed, and EPSS estimates a 0.06% probability of exploitation. The vulnerability is rated critical but carries a medium CVSS 4.0 score of 5.5 due to limited impact.

SQL injection in Campcodes Employee Management System 1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the mailuid parameter in /process/eprocess.php. This critical vulnerability can lead to unauthorized data access or manipulation. Exploit code is publicly available, though EPSS estimates a low probability (0.06%) of widespread exploitation.

An SQL injection vulnerability exists in the Dahua Smart Cloud Gateway Registration Management Platform via the username parameter in the /index.php/User/doLogin endpoint. The application fails to properly sanitize user input, allowing unauthenticated attackers to inject arbitrary SQL statements and potentially disclose sensitive information. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.

SQL injection in Campcodes Employee Management System 1.0 allows remote attackers to manipulate database queries via the ID parameter of the /changepassemp.php password change page. This unauthenticated, remotely exploitable flaw can lead to unauthorized data access or modification. Public exploit code is available, but the EPSS score of 0.06% indicates low exploitation probability, and no active exploitation has been confirmed.

SQL injection in Campcodes Employee Management System 1.0 allows unauthenticated remote attackers to inject arbitrary SQL commands via the mailuid parameter in /process/aprocess.php. This can lead to database compromise, including unauthorized data access and modification. A public proof

SQL injection in Campcodes Employee Management System 1.0 allows remote unauthenticated attackers to manipulate the ID parameter of the /applyleave.php endpoint, leading to unauthorized database access or modification. A publicly available proof-of-concept exploit exists, enabling data exfiltration without authentication. The vulnerability received a CVSS 4.0 base score of 5.5 (Medium) and has a low EPSS exploitation probability (0.06%).

SQL injection in Simple Pizza Ordering System 1.0 enables remote attackers to manipulate the ID parameter of /editcus.php, potentially leading to unauthorized data access or modification. Exploit code is publicly available, though no active exploitation has been reported, and EPSS predicts a low likelihood of widespread use.

SQL injection in Simple Pizza Ordering System 1.0 allows remote, unauthenticated attackers to manipulate the ID parameter in the /large.php file to execute arbitrary SQL queries, potentially compromising data confidentiality, integrity, and availability. Public exploit code is available, though the EPSS score of 0.06% suggests low likelihood of widespread exploitation.

SQL injection in Simple Pizza Ordering System 1.0 allows remote attackers to manipulate database queries via the 'ID' parameter of /addpro.php. With no authentication or user interaction required, an attacker can read, modify, or delete data. Exploit code is publicly available but EPSS indicates a low probability of widespread exploitation.

SQL injection in Campcodes Sales and Inventory System 1.0 allows remote unauthenticated attackers to manipulate the 'cid' parameter in /pages/payment_add.php to execute arbitrary SQL commands. A publicly available proof-of-concept exists, but no active exploitation has been reported. Exploitation can lead to unauthorized data access, modification, or deletion.

SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate database queries via the ID parameter in /admin/manage-foreigners-ticket.php. Public exploit code is available, though no active exploitation has been confirmed by CISA KEV. The low CVSS score (2.1) reflects limited impact and the requirement for low-privilege credentials.

SQL injection in PHPGurukul Zoo Management System 2.1 allows low-privileged authenticated remote attackers to inject malicious SQL via the viewid parameter in /admin/view-normal-ticket.php. Exploit code is publicly available, though no active exploitation has been confirmed and EPSS remains low. The vulnerability carries a low CVSS 4.0 base score (2.1) due to limited impact, but the reporting source rates it as critical.

SQL injection in code-projects Online Hotel Booking 1.0 allows remote attackers to manipulate the 'uname' parameter in /admin/registration.php to extract or modify database contents. The vulnerability is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) and has publicly available exploit code, though EPSS indicates very low exploitation probability (0.05%).

SQL injection in PHPGurukul Student Record System 3.2 allows authenticated low-privilege users to manipulate database queries via the 'session' parameter in /register.php, potentially leading to data theft or modification. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates very low likelihood (0.04%).

Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, SQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information. This issue has been patched in versions 14.94.3 and 15.58.0. There are no workarounds for this issue other than upgrading.

SQL injection in PHPGurukul Student Record System 3.2 enables authenticated remote attackers to manipulate database queries via the fmarks2 parameter in /edit-student.php, potentially leading to data exposure or modification. Exploit code is publicly available, but the low EPSS score (0.04%) and required low-privilege authentication limit immediate real-world risk.

Remote SQL injection in PHPGurukul Student Record System 3.2 allows authenticated attackers to manipulate the aemailid parameter via /admin-profile.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation (CISA KEV) or vendor patch has been confirmed at this time.

SQL injection in PHPGurukul Student Record System 3.2 allows authenticated remote attackers to manipulate backend database queries by supplying a crafted value to the `del` parameter in `/manage-students.php`. A public proof-of-concept is available on GitHub (referenced in NVD), enabling potential database enumeration, data exfiltration, or record manipulation against any exposed deployment. Despite the public exploit, EPSS sits at 0.04% (13th percentile), reflecting the product's narrow real-world footprint rather than any technical barrier to exploitation.

SQL injection in the 'del' parameter of /manage-subjects.php in PHPGurukul Student Record System 3.2 allows authenticated, low-privilege remote attackers to manipulate the backend database. Public exploit code is available, though EPSS exploitation probability is low (0.04%) and active exploitation by CISA KEV is not confirmed.

SQL injection in PHPGurukul Student Record System 3.2 via /session.php allows authenticated remote attackers to manipulate the session parameter to execute arbitrary SQL commands, leading to potential data theft or tampering. A public proof-of-concept exploit is available, though no active exploitation has been confirmed. The affected system is a niche academic management platform, reducing widespread risk.

SQL injection in PHPGurukul Old Age Home Management System 1.0 allows authenticated users with low privileges to execute arbitrary SQL commands via the emeradd parameter in /admin/add-scdetails.php. An attacker can

SQL injection in PHPGurukul Old Age Home Management System 1.0 allows remote authenticated attackers with low privileges to manipulate the sertitle parameter in /admin/edit-services.php, potentially leading to unauthorized database access or modification. Public exploit code is available, but there is no evidence of active exploitation in the wild. The vulnerability has a low CVSS 4.0 base score of 2.1, reflecting limited impact and authenticated access requirements.

SQL injection in Car Rental System 1.0 allows remote attackers to manipulate the 'fname' parameter in /book_car.php, leading to unauthorized database access. Publicly available exploit code exists, but no active exploitation or KEV listing has been reported. The vulnerability affects the open-source project from code-projects and carries a low EPSS score, indicating limited real-world targeting.

SQL injection in the login page of Code-projects Car Rental System 1.0 allows unauthenticated remote attackers to inject malicious SQL via the 'uname' parameter, potentially bypassing authentication and compromising the underlying database. Public exploit code is available, but EPSS (0.05%) and product footprint indicate low likelihood of widespread exploitation; no known active exploitation is flagged by CISA KEV.

Unauthenticated SQL injection in the signup endpoint of code-projects Car Rental System 1.0 allows remote attackers to extract or modify database contents via the fname parameter. Exploit code is publicly available, though the EPSS score of 0.05% suggests low current exploitation likelihood.

SQL injection in code-projects Car Rental System 1.0 via the car_name parameter in /admin/add_cars.php allows remote, unauthenticated attackers to manipulate database queries. A public proof-of-concept exploit is available, though EPSS indicates a very low probability of widespread exploitation and no active attacks are confirmed (not in CISA KEV). The vulnerability can lead to unauthorized data access or modification within the database.

SQL injection in Car Rental System 1.0 (PHP) allows manipulation of the /admin/approve.php endpoint by supplying a malicious value to the ID parameter, potentially enabling full database read and write operations. A public proof-of-concept exploit is available on GitHub. Despite the unauthenticated vector assigned in the CVSS data, the endpoint's location under /admin/ raises an unresolved question about whether authentication is actually enforced - a critical detail for defenders assessing real exposure. EPSS sits at 0.05% (14th percentile), consistent with the obscure, niche footprint of this code-projects demo application.

SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to manipulate database queries via the edituserName parameter in /php_action/editUser.php. The exploit is publicly available, but the EPSS score is only 0.05%, indicating low probability of widespread exploitation. No evidence of active exploitation has been reported.

SQL injection in code-projects Inventory Management System 1.0 allows remote, unauthenticated attackers to manipulate the userid parameter in /php_action/removeUser.php, potentially executing arbitrary SQL commands. Publicly available exploit code exists, but the EPSS exploitation probability is low (0.05%). No evidence of active exploitation has been reported.

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.

SQL injection in code-projects Inventory Management System 1.0 allows remote unauthenticated attackers to manipulate the Username parameter in /php_action/createUser.php, leading to unauthorized data access or modification. Public exploit code is available (GitHub issue), but the EPSS exploitation probability is low (0.05%). The vulnerability is classified as critical despite a moderate CVSS base score, and no vendor-released patch has been identified.

SQL injection in Movie Ticketing System 1.0 allows remote attackers with low privileges to manipulate the backend database through the Date parameter of the /ticketConfirmation.php endpoint. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV. The impact is rated low by CVSS, limiting the risk to data exposure or minor data tampering.

SQL injection in code-projects Movie Ticketing System 1.0 via the postName parameter in /logIn.php allows remote attackers to manipulate database queries. The vulnerability has a CVSS 4.0 score of 5.5 with low confidentiality, integrity, and availability impact. A public exploit is available, but there is no evidence of active exploitation.

SQL injection in PHPGurukul Teachers Record Management System 2.1 allows unauthenticated remote attackers to execute arbitrary SQL commands via the tid parameter in /admin/changeimage.php. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS probability is low (0.05%), indicating limited exploitation likelihood at this time.

SQL injection in PHPGurukul Teachers Record Management System 2.1 allows manipulation of the `tid` parameter in `/admin/edit-teacher-detail.php` to read, modify, or delete database contents. The attack is remotely exploitable and a public proof-of-concept is available on GitHub, though EPSS remains very low at 0.05% (14th percentile), indicating limited real-world targeting to date. No vendor-released patch has been identified at time of analysis.

SQL injection in Staff Audit System 1.0 allows remote attackers with low privileges to execute arbitrary SQL commands via the Search parameter in /search_index.php. A public exploit is available, though EPSS estimates very low exploitation probability (0.04%) and no active exploitation has been confirmed.

SQL injection in Staff Audit System 1.0 enables remote authenticated attackers to manipulate database queries via the updateid argument in /update_index.php. Exploit code is public, though no active exploitation is reported. The vulnerability poses low real-world risk due to limited impact and low EPSS score.

SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers with low privileges to manipulate the editid parameter in /panel/edit-tax.php to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.

SQL injection in Best Salon Management System 1.0 allows remote attackers to inject SQL via the 'Name' parameter in /panel/add-tax.php. The exploit is publicly available, though real-world risk is limited due to the product's low deployment footprint. EPSS of 0.06% indicates very low probability of active exploitation, and no CISA KEV entry suggests no current in-the-wild use.

SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated low-privilege users to execute arbitrary SQL via the searchdata parameter in /panel/search-appointment.php. Exploit code is publicly available, but no active exploitation has been confirmed. An attacker with a valid account can read, modify, or delete salon booking data.

SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate the editid parameter in /panel/edit-category.php, leading to potential data leakage or modification. A public proof-of-concept exploit is available, but no active exploitation is confirmed (EPSS score 0.08%) and the vulnerability is not listed in CISA KEV.

SQL injection in Best Salon Management System 1.0 allows remote authenticated attackers to manipulate database queries via the 'Name' parameter of /panel/add-category.php. Publicly available exploit code exists, increasing the risk of opportunistic attacks. No active exploitation has been reported in CISA KEV, but the low-complexity flaw can lead to unauthorized data access or modification.

Limited SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via the editid parameter in /panel/edit-subscription.php. The vulnerability has a publicly available proof-of-concept exploit and may result in low-impact data access or modification, though no active exploitation has been confirmed by CISA KEV.

SQL injection in Best Salon Management System 1.0 via the user_id/plan_id parameters of /panel/add_subscribe.php allows remote attackers with low-privilege credentials to manipulate database queries, potentially leading to unauthorized data access or modification. A publicly available exploit exists, but no active exploitation has been reported in the wild. The CVSS 4.0 base metrics indicate only limited impact on confidentiality, integrity, and availability.

SQL injection in SourceCodester Simple Company Website 1.0 allows remote attackers to manipulate the login process via the Username parameter in /classes/Login.php. A publicly available proof-of-concept exploit exists, and EPSS indicates a 0.09% probability of exploitation, but no active exploitation campaigns are confirmed.

An SQL injection in Simple Company Website 1.0's admin testimonials management page allows authenticated administrators to execute arbitrary SQL commands. Remotely exploitable, this can lead to limited compromise of database confidentiality, integrity, and availability. Proof-of-concept code is publicly available, though current exploitation probability is low (EPSS 0.08%, no active

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges.

SQL injection in SourceCodester Simple Company Website

Authenticated SQL injection in SourceCodester Simple Company Website 1.0 allows remote administrators to execute arbitrary SQL commands via the ID parameter in the admin/services/manage.php endpoint, potentially leading to data manipulation or information disclosure. Exploit code is publicly available, but EPSS indicates very low exploitation probability and no active exploitation is confirmed.

SQL injection in PHPGurukul Local Services Search Engine Management System 2.1 enables remote unauthenticated attackers to inject arbitrary SQL commands via the editid parameter in /admin/edit-category-detail.php, potentially allowing unauthorized database access or modification. A publicly available proof-of-concept exists, but real-world exploitation remains minimal with EPSS at 0.06% (18th percentile), indicating the vulnerable application has extremely limited deployment footprint despite the publicly disclosed vulnerability.

SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to manipulate the editid parameter in /panel/edit_plan.php, leading to unauthorized database access or modification. Publicly available exploit code exists, but EPSS estimates a low 0.06% likelihood of exploitation, and it is not listed in CISA's Known Exploited Vulnerabilities catalog.

SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to manipulate database queries via plan_name, description, duration_days, and price parameters in /panel/add_plan.php. An attacker with low-privileged access can extract or modify data through publicly available exploit code, though no active exploitation has been confirmed.

SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate database queries via the fromdate/todate parameters in /panel/staff_commision.php. Public exploit code exists, but no active exploitation is confirmed. The CVSS 4.0 base score is 2.1 (Low), though the reporter assigns a critical severity, likely due to different scoring versions.

SQL injection in Best Salon Management System 1.0 via the /panel/pro_s

Improper neutralization of SQL injection defenses in ESAPI esapi-java-legacy's Encoder.encodeForSQL method allows remote attackers to bypass sanitization and inject arbitrary SQL commands. The vulnerability affects all versions prior to 2.7.0.0 and public exploit code has been released. Although the fix disables the method by default, applications that explicitly call encodeForSQL remain at risk.

Remote SQL injection in code-projects Simple Forum 1.0 allows authenticated low-privilege attackers to read, modify, or delete database contents via the File parameter in /forum1.php. Exploit code is publicly available but no active exploitation has been reported; EPSS indicates very low exploitation probability.

SQL injection in Simple Forum 1.0 allows remote attackers to manipulate the 'iii' parameter in /forum_edit.php, potentially leading to unauthorized database access. A public proof-of-concept exploit exists, though no active exploitation has been confirmed. The vulnerability affects an open-source PHP forum application.

Remote SQL injection in Simple Forum 1.0 allows unauthenticated attackers to execute arbitrary SQL commands via the 'Name' parameter in /forum_viewfile.php. Public exploit code exists but no active exploitation is known; EPSS score is very low (0.04%) indicating limited real-world targeting despite high technical impact potential.

SQL injection in Simple Forum 1.0 allows remote attackers to execute arbitrary SQL queries via the User parameter in /register1.php. A public exploit is available on GitHub, increasing the likelihood of targeted attacks, though the EPSS score is low at 0.06% indicating limited active exploitation at present.

SQL injection in Simple Forum 1.0's signin.php allows remote attackers to manipulate the User parameter, potentially leading to unauthorized data access or modification. The vulnerability is publicly disclosed with exploit code available, though EPSS scoring indicates low immediate exploitation probability.

Authenticated SQL injection in Product Inventory System 1.0 via the ID parameter in /admin/edit_user.php allows high-privilege attackers to execute arbitrary SQL commands. A public proof-of-concept is available, but the very low EPSS score (0.06%) and absence of KEV listing indicate negligible real-world exploitation risk.

SQL injection in Product Inventory System 1.0 allows remote authenticated attackers with administrative privileges to modify database records via the ID parameter in /admin/edit_product.php. Exploit code is publicly available, but no evidence of active exploitation; the EPSS score is very low (0.06%), suggesting limited real-world risk at this time.

SQL injection in the login endpoint of code-projects Product Inventory System 1.0 allows remote attackers to manipulate the Username parameter. This can lead to authentication bypass, data leakage, or database tampering. Exploit code is publicly available, but no active exploitation campaign has been confirmed.

SQL injection in code-projects Library System 1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the phone parameter in /profile.php. The vulnerability has a publicly available proof-of-concept, though no active exploitation is confirmed and EPSS estimates low short-term exploitation probability (0.06%). Impact is limited per CVSS scoring, primarily posing a risk of data theft or tampering.

SQL injection in Code-Projects Library System 1.0 allows remote unauthenticated attackers to manipulate database queries via the 'reg' parameter in /student-issue-book.php. Public exploit code is available, enabling potential data tampering or unauthorized access. Despite a network attack vector, CVSS 4.0 rates overall severity as medium (5.5) due to limited impact.

SQL injection in Inventory Management System 1.0 allows unauthorized database manipulation via the orderId parameter. An unauthenticated remote attacker can exploit the /php_action/editPayment.php endpoint to execute arbitrary SQL statements. Public exploit code is available, though no active exploitation has been confirmed, and the EPSS probability is low.

A vulnerability was found in aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 and classified as critical. This issue affects the function outAddress of the component External Address Book Handler. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

Unauthenticated SQL injection in code-projects Inventory Management System 1.0 exposes the /orders.php endpoint to remote database manipulation via the `i` parameter, which is passed to a SQL query without sanitization. Any attacker with HTTP access to the application can read, modify, or delete inventory and order records stored in the backend database. A public proof-of-concept exploit has been disclosed via a GitHub issue, lowering the bar for exploitation despite a low EPSS score.

SQL injection in code-projects Inventory Management System 1.0 allows unauthenticated remote attackers to manipulate database queries via the editOrder.php file. Public exploit code exists, though EPSS indicates low exploitation probability (0.06%) and no active exploitation has been confirmed.

SQL injection in code-projects Payroll Management System 1.0 via the ID parameter in /ajax.php?action=save_department allows remote attackers to execute arbitrary SQL commands, potentially compromising backend database content. A public proof-of-concept exploit is available, but no active exploitation has been confirmed (EPSS 0.06%).

SQL injection in Inventory Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the editProductName parameter in /php_action/editProduct.php. A public proof-of-concept exploit exists, but no active exploitation has been confirmed. The vulnerability has a medium CVSS 4.0 score and low EPSS likelihood, indicating limited practical risk outside of exposed installations.

SQL injection in code-projects Inventory Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the productId parameter in /php_action/removeProduct.php. An unauthenticated attacker can potentially access or modify database contents, though impact is rated low. A public proof-of-concept exists, but EPSS indicates low exploitation probability.