GCVE - cpe:2.3:a:code-projects:wazifa_system:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:wazifa_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Code Projects (`a64d3912-7513-5560-97cf-6216c4da48a5`)
Product	Wazifa System (`5aa7289c-b780-50c4-97b1-cf287756159f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8468`	vulnerable	2026-06-08 07:45:20.614803	code-projects Wazifa System reset.php sql injection HIGH (7.3) A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-02T14:32:05.375Z Updated: 2025-08-04T15:15:28.763Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318518 https://vuldb.com/?ctiid.318518 https://vuldb.com/?submit.625787 https://github.com/wllovemy/cve/issues/13 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8467`	vulnerable	2026-06-08 07:45:20.614312	code-projects Wazifa System regcontrol.php sql injection HIGH (7.3) A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-02T11:02:05.501Z Updated: 2025-08-04T13:23:49.492Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318517 https://vuldb.com/?ctiid.318517 https://vuldb.com/?submit.625786 https://github.com/wllovemy/cve/issues/12 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8439`	vulnerable	2026-06-08 07:45:20.144570	code-projects Wazifa System updatesettings.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects some unknown processing of the file /controllers/updatesettings.php. The manipulation of the argument Password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-01T07:02:05.913Z Updated: 2025-08-01T13:00:33.979Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318467 https://vuldb.com/?ctiid.318467 https://vuldb.com/?submit.625557 https://github.com/wllovemy/cve/issues/14 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8438`	vulnerable	2026-06-08 07:45:20.143259	code-projects Wazifa System postpublish.php sql injection HIGH (7.3) A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpublish.php. The manipulation of the argument post leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-01T06:32:05.721Z Updated: 2025-08-01T13:23:23.527Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318466 https://vuldb.com/?ctiid.318466 https://vuldb.com/?submit.625556 https://github.com/wllovemy/cve/issues/15 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1210`	vulnerable	2026-06-08 07:06:37.153819	code-projects Wazifa System control.php sql injection MEDIUM (6.3) A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is an unknown functionality of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-02-12T17:00:13.265Z Updated: 2025-02-12T19:04:15.250Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295147 https://vuldb.com/?ctiid.295147 https://vuldb.com/?submit.497357 https://github.com/nanguawuming/CVE2/blob/main/cve3.pdf https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1209`	vulnerable	2026-06-08 07:06:37.153420	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1208`	vulnerable	2026-06-08 07:06:37.152324	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12001`	vulnerable	2026-06-08 06:23:50.882227	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10742`	vulnerable	2026-06-08 06:23:47.407746	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10699`	vulnerable	2026-06-08 06:23:47.294702	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.