Code-Projects News-Buzz vulnerabilities

CVE-2025-15197 [MEDIUM] CWE-284 CVE-2025-15197: A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and New A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and m

CVE-2025-5633 [MEDIUM] CWE-74 CVE-2025-5633: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0 A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the

CVE-2025-5632 [MEDIUM] CWE-74 CVE-2025-5632: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0 A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads to sql injection. The attack can be launched remotely. The exploit has bee

CVE-2025-5631 [MEDIUM] CWE-74 CVE-2025-5631: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0 A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a

CVE-2024-10758 [MEDIUM] CWE-89 CVE-2024-10758: A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument user_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and