Rowantu/CVE

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-14529 ↗	Dec 11, 2025Thursday, 11 December 2025, 18:16	7.3 HIGH	7.5 HIGH
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVE-2025-11614 ↗	Oct 11, 2025Saturday, 11 October 2025, 21:15	7.3 HIGH	7.5 HIGH
A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
CVE-2025-11555 ↗	Oct 9, 2025Thursday, 9 October 2025, 21:15	7.3 HIGH	7.5 HIGH
A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The manipulation of the argument date_start results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.