CVE-2025-6346: Medium SQL Injection in Advance Charity Management System
CVE-2025-6346: Medium SQL injection in SourceCodester Advance Charity Management System 1.0. No fix is listed; Limit access and use prepared statements.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-6346: Medium SQL injection in SourceCodester Advance Charity Management System 1.0. No fix is listed; Limit access and use prepared statements.
CVE-2025-6344: High SQL injection in code-projects Online Shoe Store 1.0 via /contactus.php. No fix is listed; Limit access and use prepared statements.
CVE-2025-6343: High SQL injection in code-projects Online Shoe Store 1.0 via /admin/admin_product.php. No fix is listed; Restrict access and fix the query.
CVE-2025-6342: High SQL injection in Online Shoe Store 1.0 via /admin/admin_football.php. No fix is listed; Limit access and use prepared statements.
CVE-2025-6339: High SQL injection in ponaravindb Hospital Management System 1.0. No fix is listed; Limit access and use prepared statements.
CVE-2025-63388: disputed critical CORS finding (CVSS 9.1) in Dify 1.9.1 on /console/api/system-features. No fix listed; review CORS and supplier note.
CVE-2025-63386: disputed critical CORS finding (CVSS 9.1) in Dify 1.9.1 on /console/api/setup. No fix listed; review your CORS rules and the supplier note.
CVE-2025-6330: High SQL injection in PHPGurukul Directory Management System 1.0. No fix is listed; Limit access and use prepared statements.
CVE-2025-6323: High SQL injection in PHPGurukul Pre-School Enrollment System 1.0. No fix is listed; Limit access and use prepared statements.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.