Browse CVEs

HIGH 8.8 CVE-2025-11589 A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Perf… Gym Management System No fix yet Fix from $1,9502025-10-10 HIGH 8.8 CVE-2025-11588 A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipul… Gym Management System No fix yet Fix from $1,9502025-10-10 CRITICAL 9.8 CVE-2025-11585 A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The … Project Monitoring System Mitigation only Fix from $2,3002025-10-10 CRITICAL 9.8 CVE-2025-11584 A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php.… Online Job Search Engine Mitigation only Fix from $2,3002025-10-10 CRITICAL 9.8 CVE-2025-11583 A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjob.php. Executing manipulation… Online Job Search Engine Mitigation only Fix from $2,3002025-10-10 CRITICAL 9.8 CVE-2025-11582 A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php.… Online Job Search Engine Mitigation only Fix from $2,3002025-10-10 CRITICAL 9.4 CVE-2025-60269 JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/exce… Jeewms No fix yet Fix from $2,3002025-10-10 CRITICAL 9.8 CVE-2025-60307 code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the logi… Computer Laboratory System Mitigation only Fix from $2,3002025-10-10 HIGH 7.3 CVE-2025-11188 The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corres… Kiwire Mitigation only Fix from $1,9502025-10-10 CRITICAL 9.8 CVE-2025-11557 A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php… Gate Pass Management System Mitigation only Fix from $2,3002025-10-09 CRITICAL 9.8 CVE-2025-11558 A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performi… E Commerce Website Mitigation only Fix from $2,3002025-10-09 CRITICAL 9.8 CVE-2025-11555 A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.p… Online Learning Management System Mitigation only Fix from $2,3002025-10-09 CRITICAL 9.8 CVE-2025-11556 A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of … Simple Leave Manager Mitigation only Fix from $2,3002025-10-09 CRITICAL 9.4 CVE-2025-60316 SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter. Pet Grooming Management Software No fix yet Fix from $2,3002025-10-09 CRITICAL 9.8 CVE-2025-11553 A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file… Courier Management System Mitigation only Fix from $2,3002025-10-09 HIGH 8.8 CVE-2025-11552 A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such man… Online Complaint Site No fix yet Fix from $1,9502025-10-09 CRITICAL 9.8 CVE-2025-11551 A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. … Student Result Manager Mitigation only Fix from $2,3002025-10-09 MEDIUM 6.5 CVE-2025-60267 In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL injectio… Xckk No fix yet Fix from $1,6002025-10-09 MEDIUM 6.5 CVE-2025-60266 In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL inje… Xckk No fix yet Fix from $1,6002025-10-09 MEDIUM 6.5 CVE-2025-60265 In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQL injecti… Xckk No fix yet Fix from $1,6002025-10-09 HIGH 8.8 CVE-2025-62228 Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name.… Flink Cdc Mitigation only Fix from $1,9502025-10-09 HIGH 7.5 CVE-2025-10862 The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Inje… Mitigation only Fix from $1,9502025-10-09 HIGH 8.8 CVE-2025-11530 A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This man… Online Complaint Site No fix yet Fix from $1,9502025-10-09 CRITICAL 9.8 CVE-2025-10586 The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions up to, and including, 1.5.1 … No fix yet Fix from $2,3002025-10-09 HIGH 8.8 CVE-2025-11514 A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. … Online Complaint Site No fix yet Fix from $1,9502025-10-09 HIGH 8.8 CVE-2025-11515 A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/reg… Online Complaint Site No fix yet Fix from $1,9502025-10-09 HIGH 8.8 CVE-2025-11516 A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.p… Online Complaint Site No fix yet Fix from $1,9502025-10-09 CRITICAL 9.8 CVE-2025-11513 A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This man… E Commerce Website Mitigation only Fix from $2,3002025-10-09 CRITICAL 9.8 CVE-2025-11511 A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipul… E Commerce Website Mitigation only Fix from $2,3002025-10-08 CRITICAL 9.8 CVE-2025-11509 A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing… E Commerce Website Mitigation only Fix from $2,3002025-10-08