Skip to content
Noroxi

carmelo records

127 published records for vendor carmelo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

127 records
  • CVE-2025-25914
    39Monitor

    SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · online exam mastering systemMar 17, 2025

  • CVE-2025-69559
    39Monitor

    code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · computer book storeJan 27, 2026

  • CVE-2024-25250
    39Monitor

    SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · agro-school management systemMar 13, 2024

  • CVE-2026-26711
    39Monitor

    code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple food order systemMar 2, 2026

  • CVE-2026-26694
    39Monitor

    code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple student alumni systemMar 2, 2026

  • CVE-2026-26695
    39Monitor

    code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple student alumni systemMar 2, 2026

  • CVE-2026-26713
    39Monitor

    code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple food order systemMar 2, 2026

  • CVE-2026-26709
    39Monitor

    code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple gym management systemMar 2, 2026

  • CVE-2026-26696
    39Monitor

    code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple student alumni systemMar 2, 2026

  • CVE-2026-26712
    39Monitor

    code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple food order systemMar 2, 2026

  • CVE-2026-26710
    39Monitor

    code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    carmelo · simple food order systemMar 2, 2026

  • CVE-2025-60307
    39Monitor

    code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on

    CriticalCVSS 9.8No exploitEPSS 0%

    carmelo · computer laboratory systemOct 10, 2025

  • CVE-2024-25251
    35Monitor

    code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.

    HighCVSS 8.8No exploitEPSS 1%

    carmelo · agro-school management systemFeb 21, 2024

  • CVE-2024-24100
    33Monitor

    Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.

    HighCVSS 8.3No exploitEPSS 1%

    carmelo · computer book storeFeb 26, 2024

  • CVE-2024-24096
    31Monitor

    Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.

    HighCVSS 7.8No exploitEPSS 0%

    carmelo · computer book storeFeb 26, 2024

  • CVE-2024-24105
    31Monitor

    SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvali

    HighCVSS 7.8No exploitEPSS 0%

    carmelo · computer science time table systemMar 13, 2024

  • CVE-2024-28279
    29Monitor

    Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.

    HighCVSS 7.3No exploitEPSS 0%

    carmelo · computer book storeMay 14, 2024

  • CVE-2025-56295
    29Monitor

    code-projects Computer Laboratory System 1.0 has a file upload vulnerability.

    HighCVSS 7.3No exploitEPSS 0%

    carmelo · computer laboratory systemSep 16, 2025

  • CVE-2025-6363
    27Monitor

    code-projects Simple Pizza Ordering System adding-exec.php sql injection

    MediumCVSS 6.9No exploitEPSS 0%

    carmelo · simple pizza ordering systemJun 20, 2025

  • CVE-2025-6361
    27Monitor

    code-projects Simple Pizza Ordering System adds.php sql injection

    MediumCVSS 6.9No exploitEPSS 0%

    carmelo · simple pizza ordering systemJun 20, 2025

  • CVE-2025-6362
    27Monitor

    code-projects Simple Pizza Ordering System editpro.php sql injection

    MediumCVSS 6.9No exploitEPSS 0%

    carmelo · simple pizza ordering systemJun 20, 2025

  • CVE-2025-6364
    27Monitor

    code-projects Simple Pizza Ordering System adduser-exec.php sql injection

    MediumCVSS 6.9No exploitEPSS 0%

    carmelo · simple pizza ordering systemJun 20, 2025

  • CVE-2026-2158
    27Monitor

    code-projects Student Web Portal check_user.php sql injection

    MediumCVSS 6.9No exploitEPSS 0%

    carmelo · student web portalFeb 8, 2026

  • CVE-2026-4532
    22Monitor

    code-projects Simple Food Ordering System Database Backup food.sql file access

    MediumCVSS 5.5No exploitEPSS 1%

    carmelo · simple food order systemMar 21, 2026

  • CVE-2026-3744
    22Monitor

    code-projects Student Web Portal signup.php valreg_passwdation sql injection

    MediumCVSS 5.5No exploitEPSS 1%

    carmelo · student web portalMar 8, 2026