Read the docs

Wecodex

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Wecodex records in CISA KEV

No Wecodex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hotel Cms 1 record HIGH Library Cms 1 record HIGH Restaurant Cms 1 record MEDIUM School Management System Cms 1 record MEDIUM Shipping System Cms 1 record HIGH

Records

7 records

TI-2018-15429 CVE-2018-25204 · GHSA-68mg-9jq3-6jrc

Library CMS 1.0 SQL Injection via admin login

Priority HIGH 77

Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0055 Published 2026-03-26 No fix listed CWE-89
TI-2018-15428 CVE-2018-25203 · GHSA-4cp9-9rmg-ph8j

Online Store System CMS 1.0 SQL Injection via clientaccess

Priority HIGH 77

Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0034 Published 2026-03-26 No fix listed CWE-89
TI-2018-15427 CVE-2018-25202 · GHSA-q8vp-5rq8-4rfj

SAT CFDI 3.3 SQL Injection via signIn endpoint

Priority HIGH 77

SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0025 Published 2026-03-26 No fix listed CWE-89
TI-2018-15420 CVE-2018-25195 · GHSA-w7h7-95hx-jvj6

Wecodex Hotel CMS 1.0 SQL Injection via Admin Login

Priority HIGH 77

Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00529 Published 2026-03-26 No fix listed CWE-89
TI-2018-15408 CVE-2018-25183 · GHSA-p8gp-2v3x-m88h

Shipping System CMS 1.0 SQL Injection via admin login

Priority HIGH 77

Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00529 Published 2026-03-26 No fix listed CWE-89
TI-2018-15426 CVE-2018-25201 · GHSA-qxr5-86c9-g8f9

School Management System CMS 1.0 Admin Login SQL Injection

Priority MEDIUM 64

School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting SQL code through the username parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00507 Published 2026-03-26 No fix listed CWE-89
TI-2018-15410 CVE-2018-25185 · GHSA-4j5p-2cxc-9j9x

Wecodex Restaurant CMS 1.0 SQL Injection via Login

Priority MEDIUM 45

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00477 Published 2026-03-26 No fix listed CWE-89
Open these records in search →