CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3151 – SourceCodester Gym Management System signup.php sql injection
https://notcve.org/view.php?id=CVE-2025-3151
03 Apr 2025 — A vulnerability was found in SourceCodester Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument user_name leads to sql injection. The attack may be launched remotely. • https://github.com/MiniSweetBeen/src/issues/5 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3143 – SourceCodester Apartment Visitor Management System visitor-entry.php sql injection
https://notcve.org/view.php?id=CVE-2025-3143
03 Apr 2025 — A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Lena-lyy/SQL/blob/main/SQL4.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3142 – SourceCodester Apartment Visitor Management System add-apartment.php sql injection
https://notcve.org/view.php?id=CVE-2025-3142
03 Apr 2025 — A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument buildingno leads to sql injection. The attack may be initiated remotely. • https://github.com/Lena-lyy/SQL/blob/main/SQL3.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3141 – SourceCodester Online Medicine Ordering System manage_category.php sql injection
https://notcve.org/view.php?id=CVE-2025-3141
03 Apr 2025 — A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. • https://github.com/Lena-lyy/SQL/blob/main/SQL2.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3140 – SourceCodester Online Medicine Ordering System view_category.php sql injection
https://notcve.org/view.php?id=CVE-2025-3140
03 Apr 2025 — A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /view_category.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/Lena-lyy/SQL/blob/main/SQL1.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3120 – SourceCodester Apartment Visitors Management System add-apartment.php sql injection
https://notcve.org/view.php?id=CVE-2025-3120
02 Apr 2025 — A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely. • https://github.com/byxs0x0/SQL/blob/main/SQL5.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3119 – SourceCodester Online Tutor Portal manage_course.php sql injection
https://notcve.org/view.php?id=CVE-2025-3119
02 Apr 2025 — A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/manage_course.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. • https://github.com/byxs0x0/SQL/blob/main/SQL4.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-3118 – SourceCodester Online Tutor Portal view_course.php sql injection
https://notcve.org/view.php?id=CVE-2025-3118
02 Apr 2025 — A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/view_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/byxs0x0/SQL/blob/main/SQL3.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-3096 – Clinics Patient Management System SQL Injection
https://notcve.org/view.php?id=CVE-2025-3096
01 Apr 2025 — Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page. • https://www.cve.org/CVERecord?id=CVE-2022-2297 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2025-3045 – oretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injection
https://notcve.org/view.php?id=CVE-2025-3045
01 Apr 2025 — A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/byxs0x0/SQL/blob/main/SQL2.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •