Security Intel Hub 332+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

CVSS 4.7

SimpleHotel add_account.php SQL Injection Vulnerability Analysis

github.com · 2025-11-02

### Vulnerability Key Information #### 1. Vulnerability Type - **SQL Injection** #### 2. Vulnerable Files - **add_account.php, name.php** #### 3. Vulnerability Description - In the `add_account.php` f…

CVSS 4.7

SimpleHotel Arbitrary File Upload Vulnerability in edit_query_room.php

github.com · 2025-11-02

### Vulnerability Key Information - **CVE ID**: Not explicitly assigned - **Vulnerability Description**: - Affected Files: `edit_query_room.php` and `edit_room.php` - Description: These two files cont…

CVSS 4.3

Client Details System V1.0 IDOR and Vertical Privilege Escalation Vulnerability Analysis

github.com · 2025-10-27

### Critical Vulnerability Information #### Affected Product - **Name**: Client Details System - **Version**: V1.0 - **Link**: [Client Details System in PHP Web Source Code - Source Code & Projects](h…

CVSS 2.4

Stored XSS Vulnerability in Client Details System V1.0

github.com · 2025-10-27

### Critical Vulnerability Information #### Affected Product - **Product Name**: Client Details System - **Version**: V1.0 - **Vendor Homepage**: [Client Details System In PHP With Source Code - Sourc…

CVSS 6.3

SQL Injection in Online Event Judging System V1.0 via crit_id parameter

github.com · 2025-10-27

### Key Information #### Affected Product - **Product Name**: Online Event Judging System V1.0 - **Vendor Homepage**: https://code-projects.org/ #### Affected and Fixed Versions - **Affected File**: e…

CVSS 6.3

SQL Injection in Online Event Judging System V1.0 edit_contestant.php

github.com · 2025-10-27

### Key Information #### Affected Product - **Product Name**: Online Event Judging System - **Version**: V1.0 - **Vulnerable File**: edit_contestant.php #### Vulnerability Type - **Type**: SQL Injecti…

CVSS 6.3

SQL Injection in Online Event Judging System V1.0 (add_contestant.php)

github.com · 2025-10-27

### Key Information #### Affected Product - **Product Name**: Online Event Judging System V1.0 - **Vendor Homepage**: https://code-projects.org/ - **Affected/Fixed Version**: V1.0 #### Vulnerable File…

CVSS 4.3

Stored XSS Vulnerability in eBank register.php

github.com · 2025-10-27

### Critical Vulnerability Information #### Vulnerability Type - **XSS (Cross-Site Scripting)** #### Vulnerable File - `register.php` #### Vulnerability Description - The `register.php` file contains …

CVSS 6.3

Automated Voting System V1.0 SQL Injection in admin/user.php with POC

github.com · 2025-10-27

### Key Information #### Affected Product - **Automated Voting System** #### Vulnerable File - `admin/user.php` #### Version - V1.0 #### Vulnerability Type - SQL Injection #### Root Cause - An SQL inj…

CVSS 6.3

Client Details System V1.0 SQL Injection Vulnerability with POC

github.com · 2025-10-27

### Key Information #### Affected Product - **Product Name**: Client Details System - **Version**: V1.0 - **Link**: [Client Details System in PHP/MySQL Source Code](https://code-projects.org/client-de…

CVSS 6.3

SQL Injection in Simple Food Ordering System V1.0 (editcategory.php)

github.com · 2025-10-11

### Key Information #### Affected Product - **Name**: Simple Food Ordering System - **Version**: V1.0 - **Link**: https://code-projects.org/simple-food-ordering-system-in-php-with-source-code/ #### Vu…

CVSS 6.3

SQL Injection in E-Commerce Website V1.0 via prod_id

github.com · 2025-10-11

### Key Information Summary #### Affected Product - E-Commerce Website #### Affected Version - V1.0 #### Vulnerability Type - SQL Injection #### Root Cause - In the `product_add_qty.php` file, insuffi…

CVSS 7.3

Project Monitoring System V1 useredit.php SQL Injection Vulnerability

github.com · 2025-10-11

### Critical Vulnerability Information #### Affected Product - **Name**: Project Monitoring System - **Version**: V1 - **Link**: [Vendor Homepage](https://code-projects.org/project-monitoring-system-i…

CVSS 7.3

SQL Injection in ONLINE JOB SEARCH V1.0 (postjob.php) with POC

github.com · 2025-10-11

### Key Information #### Affected Product - **Product Name**: ONLINE JOB SEARCH V1.0 - **Vendor Homepage**: https://code-projects.org/online-job-search-engine-in-php-with-source-code/ #### Vulnerable …

CVSS 6.3

SQL Injection Vulnerability in Student Result Manager (CWE-89)

github.com · 2025-10-10

### Critical Vulnerability Information #### Vulnerability Overview - **Type**: SQL Injection - **Location**: Student Result Manager application - **Cause**: SQL statements were constructed using strin…

CVSS 7.3

Simple Leave Manager user.php SQL Injection Vulnerability with POC

github.com · 2025-10-10

### Key Information #### Vulnerability Description - **Vulnerability Type**: SQL Injection - **Affected File**: user.php - **Issue Description**: In the `user.php` file of Simple Leave Manager, the `$…

CVSS 6.3

Online Complaint Site V1.0 SQL Injection Vulnerability Details

github.com · 2025-10-09

### Critical Vulnerability Information **Affected Product** - Online Complaint Site **Vulnerability Type** - SQL Injection **Affected File** - /cms/users/complaint-details.php?cid=1 **Version** - V1.0…

CVSS 6.3

E-Commerce Website V1.0 SQL Injection Vulnerability Analysis

github.com · 2025-10-09

### Key Information Summary #### Affected Product - E-Commerce Website #### Affected Version - V1.0 #### Vulnerability Type - SQL Injection #### Root Cause - In the `supplier_add.php` file, attackers …

CVSS 4.3

Stored XSS in Code-projects Voting System V1.0 /admin/voters_add.php

github.com · 2025-10-09

### Key Information Summary #### Vulnerability Overview - **Vulnerability Type**: Stored XSS Vulnerability - **Affected Product**: Code-projects Voting System Project V1.0 - **Affected File**: /admin/…

CVSS 7.3

Unauthenticated SQL Injection in Student-Crud-Operation delete.php

github.com · 2025-10-07

### Key Information Summary #### Vulnerability Type - **SQL Injection** (Critical, Unauthenticated, destructive) #### Affected Project - Student-Crud-Operation #### Component - delete.php #### Severit…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 332+