Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:currency_exchange_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductCurrency Exchange System (4a25b40d-34dc-5ac3-9d68-274c0b21b9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14218 vulnerable 2026-06-08 07:06:33.879142 code-projects Currency Exchange System editotheraccount.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /editotheraccount.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Published: 2025-12-08T05:32:06.335Z
Updated: 2025-12-08T17:11:30.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14217 vulnerable 2026-06-08 07:06:33.878632 code-projects Currency Exchange System edittrns.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Published: 2025-12-08T05:02:06.506Z
Updated: 2025-12-08T14:19:00.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14216 vulnerable 2026-06-08 07:06:33.878276 code-projects Currency Exchange System viewserial.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewserial.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-08T04:32:06.215Z
Updated: 2025-12-08T14:21:09.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14215 vulnerable 2026-06-08 07:06:33.877280 code-projects Currency Exchange System edit.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2025-12-08T04:02:06.209Z
Updated: 2025-12-08T14:21:51.190Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.