Approved changes feed: RSS · Atom

cpe:2.3:a:carmelo:online_event_judging_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCarmelo (6b035a27-935d-5e7e-afc6-e62cb1b98eda)
ProductOnline Event Judging System (eba275e4-e71b-54b8-b4e9-8d731026d814)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9610 vulnerable 2026-06-03 15:13:46.878934 code-projects Online Event Judging System create_account.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
Published: 2025-08-29T03:32:08.500Z
Updated: 2025-08-29T13:41:29.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12263 vulnerable 2026-06-03 14:58:44.053066 code-projects Online Event Judging System edit_judge.php sql injection
MEDIUM (6.3)
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The manipulation of the argument judge_id leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-10-27T10:32:08.484Z
Updated: 2025-10-27T12:46:44.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12262 vulnerable 2026-06-03 14:58:44.052689 code-projects Online Event Judging System edit_criteria.php sql injection
MEDIUM (6.3)
A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Executing manipulation of the argument crit_id can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-10-27T10:32:05.934Z
Updated: 2025-10-27T13:22:24.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12256 vulnerable 2026-06-03 14:58:44.047053 code-projects Online Event Judging System edit_contestant.php sql injection
MEDIUM (6.3)
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Executing manipulation of the argument contestant_id can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-10-27T09:32:05.563Z
Updated: 2025-10-27T14:17:19.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12255 vulnerable 2026-06-03 14:58:44.046585 code-projects Online Event Judging System add_contestant.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /add_contestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
Published: 2025-10-27T09:02:11.193Z
Updated: 2025-10-27T15:48:22.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12254 vulnerable 2026-06-03 14:58:44.046201 code-projects Online Event Judging System add_judge.php sql injection
MEDIUM (6.3)
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2025-10-27T09:02:08.635Z
Updated: 2025-10-27T15:48:44.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12252 vulnerable 2026-06-03 14:58:44.043487 code-projects Online Event Judging System action.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2025-10-27T08:32:11.065Z
Updated: 2025-10-27T16:41:35.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10104 vulnerable 2026-06-03 14:58:33.553110 code-projects Online Event Judging System review_search.php sql injection
HIGH (7.3)
A security vulnerability has been detected in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /review_search.php. The manipulation of the argument txtsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-09-08T20:02:06.910Z
Updated: 2025-09-08T20:19:51.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10103 vulnerable 2026-06-03 14:58:33.552630 code-projects Online Event Judging System home.php sql injection
HIGH (7.3)
A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation of the argument main_event can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
Published: 2025-09-08T19:02:07.153Z
Updated: 2025-09-08T19:44:12.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10102 vulnerable 2026-06-03 14:58:33.551841 code-projects Online Event Judging System index.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-08T18:32:09.841Z
Updated: 2025-09-08T18:51:59.214Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.