GCVE - cpe:2.3:a:anisha:wazifa_system:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:anisha:wazifa_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Anisha (`1ac9f67b-cb24-514d-8d73-c12dc3b49998`)
Product	Wazifa System (`954240f1-40c0-549c-b835-7ebd2c5ffe55`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8468`	vulnerable	2026-06-03 15:13:44.029797	code-projects Wazifa System reset.php sql injection HIGH (7.3) A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-02T14:32:05.375Z Updated: 2025-08-04T15:15:28.763Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318518 https://vuldb.com/?ctiid.318518 https://vuldb.com/?submit.625787 https://github.com/wllovemy/cve/issues/13 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8467`	vulnerable	2026-06-03 15:13:44.029300	code-projects Wazifa System regcontrol.php sql injection HIGH (7.3) A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-02T11:02:05.501Z Updated: 2025-08-04T13:23:49.492Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318517 https://vuldb.com/?ctiid.318517 https://vuldb.com/?submit.625786 https://github.com/wllovemy/cve/issues/12 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8439`	vulnerable	2026-06-03 15:13:43.612647	code-projects Wazifa System updatesettings.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects some unknown processing of the file /controllers/updatesettings.php. The manipulation of the argument Password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-01T07:02:05.913Z Updated: 2025-08-01T13:00:33.979Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318467 https://vuldb.com/?ctiid.318467 https://vuldb.com/?submit.625557 https://github.com/wllovemy/cve/issues/14 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8438`	vulnerable	2026-06-03 15:13:43.612044	code-projects Wazifa System postpublish.php sql injection HIGH (7.3) A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpublish.php. The manipulation of the argument post leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-01T06:32:05.721Z Updated: 2025-08-01T13:23:23.527Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318466 https://vuldb.com/?ctiid.318466 https://vuldb.com/?submit.625556 https://github.com/wllovemy/cve/issues/15 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1210`	vulnerable	2026-06-03 14:58:58.008250	code-projects Wazifa System control.php sql injection MEDIUM (6.3) A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is an unknown functionality of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-02-12T17:00:13.265Z Updated: 2025-02-12T19:04:15.250Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295147 https://vuldb.com/?ctiid.295147 https://vuldb.com/?submit.497357 https://github.com/nanguawuming/CVE2/blob/main/cve3.pdf https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1209`	vulnerable	2026-06-03 14:58:58.007718	code-projects Wazifa System search_resualts.php searchuser cross site scripting LOW (3.5) A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is the function searchuser of the file /search_resualts.php. The manipulation of the argument firstname/lastname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. There is a typo in the affected file name. Published: 2025-02-12T16:31:04.360Z Updated: 2025-02-12T19:05:05.906Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295146 https://vuldb.com/?ctiid.295146 https://vuldb.com/?submit.497356 https://github.com/nanguawuming/CVE2/blob/main/cve2.pdf https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1208`	vulnerable	2026-06-03 14:58:58.007223	code-projects Wazifa System Profile.php cross site scripting LOW (3.5) A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /Profile.php. The manipulation of the argument postcontent leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-02-12T16:00:09.397Z Updated: 2025-02-12T19:25:49.663Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295145 https://vuldb.com/?ctiid.295145 https://vuldb.com/?submit.497355 https://github.com/nanguawuming/CVE2/blob/main/cve1.pdf https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12001`	vulnerable	2026-06-03 14:54:15.323020	code-projects Wazifa System Setting updatesettings.php cross site scripting LOW (3.5) A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2024-11-30T12:31:03.958Z Updated: 2024-12-02T15:57:37.838Z Open on db.gcve.eu Reference links https://vuldb.com/?id.286416 https://vuldb.com/?ctiid.286416 https://vuldb.com/?submit.453721 https://github.com/jaychou8023/cve/blob/main/xss4.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10742`	vulnerable	2026-06-03 14:54:12.451976	code-projects Wazifa System control.php sql injection MEDIUM (6.3) A vulnerability was found in code-projects Wazifa System 1.0 and classified as critical. This issue affects some unknown processing of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2024-11-03T21:00:08.003Z Updated: 2024-11-04T17:17:36.430Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282911 https://vuldb.com/?ctiid.282911 https://vuldb.com/?submit.436030 https://github.com/xiaokka/cve/blob/main/sql.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10699`	vulnerable	2026-06-03 14:54:12.367336	code-projects Wazifa System logincontrol.php sql injection HIGH (7.3) A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2024-11-02T14:31:04.716Z Updated: 2024-11-05T15:19:09.697Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282867 https://vuldb.com/?ctiid.282867 https://vuldb.com/?submit.435048 https://github.com/lan041221/cve/blob/main/sql9.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.