Carmelo vulnerabilities, page 5
127 vulnerabilities
Known vulnerabilities in Carmelo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 26 products.
CVE-2025-8166carmelochurch_donation_system+1
EPSS score0.60%
A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2025-8018carmelofood_ordering_review_system+1EPSS score0.41%
A vulnerability was found in code-projects Food Ordering Review System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/reservation_page.php. The manipulation of the argument reg_Id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.CVE-2025-8340carmelointern_membership_management_system+1EPSS score0.52%
A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file fill_details.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-8165carmelofood_ordering_review_system+1EPSS score0.55%
A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approve_reservation.php. The manipulation of the argument occasion leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-60307carmelocomputer_laboratory_systemEPSS score0.43%
code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.CVE-2024-25250carmeloagro-school_management_systemEPSS score0.57%
SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.CVE-2024-25251carmeloagro-school_management_systemEPSS score0.69%
code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.CVE-2024-24096carmelocomputer_book_storeEPSS score0.42%
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.CVE-2024-24100carmelocomputer_book_storeEPSS score0.56%
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.CVE-2024-24105carmelocomputer_science_time_table_systemEPSS score0.35%
SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php.CVE-2024-28279carmelocomputer_book_storeEPSS score0.32%
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.CVE-2026-2158carmelostudent_web_portal+1EPSS score0.43%
A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /check_user.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely.CVE-2026-26712carmelosimple_food_order_systemEPSS score0.53%
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.CVE-2026-26694carmelosimple_student_alumni_systemEPSS score0.53%
code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php.CVE-2026-26695carmelosimple_student_alumni_systemEPSS score0.53%
code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php.CVE-2026-26709carmelosimple_gym_management_systemEPSS score0.53%
code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.CVE-2026-26710carmelosimple_food_order_systemEPSS score0.53%
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php.CVE-2026-26698carmelosimple_student_alumni_systemEPSS score0.43%
code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.CVE-2026-26696carmelosimple_student_alumni_systemEPSS score0.53%
code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.CVE-2026-26713carmelosimple_food_order_systemEPSS score0.53%
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.