Total
20789 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-25308 | 1 Code-projects | 1 Simple School Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php. | |||||
| CVE-2024-25307 | 1 Code-projects | 1 Cinema Seat Reservation System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1." | |||||
| CVE-2024-25306 | 1 Code-projects | 1 Simple School Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php". | |||||
| CVE-2024-25305 | 1 Code-projects | 1 Simple School Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php. | |||||
| CVE-2024-25304 | 1 Code-projects | 1 Simple School Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php." | |||||
| CVE-2024-25302 | 1 Remyandrade | 1 Event Student Attendance System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter. | |||||
| CVE-2024-25288 | 1 Slims | 1 Senayan Library Management System | 2026-06-17 | N/A | 4.9 MEDIUM |
| SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php. | |||||
| CVE-2024-25250 | 1 Carmelo | 1 Agro-school Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page. | |||||
| CVE-2024-25248 | 1 Niushop | 1 B2b2c Multi-business | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter. | |||||
| CVE-2024-25247 | 1 Niushop | 1 B2b2c Multi-business | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters. | |||||
| CVE-2024-25239 | 1 Walterjnr1 | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyee_akpoly/Account/login.php. | |||||
| CVE-2024-25227 | 1 Abocms | 1 Abo.cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in admin login page. | |||||
| CVE-2024-25223 | 1 Code-projects | 1 Simple Admin Panel | 2026-06-17 | N/A | 9.8 CRITICAL |
| Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php. | |||||
| CVE-2024-25222 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 9.8 CRITICAL |
| Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php. | |||||
| CVE-2024-25220 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 9.8 CRITICAL |
| Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php. | |||||
| CVE-2024-25217 | 1 Oretnom23 | 1 Online Medicine Ordering System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product. | |||||
| CVE-2024-25216 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php. | |||||
| CVE-2024-25215 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php. | |||||
| CVE-2024-25214 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html. | |||||
| CVE-2024-25213 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php. | |||||