CVE-2025-10025 PHPGurukul Online Course Registration semester.php sql injection

A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-9919

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploi...

Apartment Management System /admin.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in ddlBranch, a parameter of the Setting Handler component in file...

CVE-2025-9919

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploi...

PT-2025-35794

Name of the Vulnerable Software and Affected Versions: 1000projects Beauty Parlour Management System version 1.0 Description: A SQL injection issue exists in 1000projects Beauty Parlour Management System version 1.0. The vulnerability is located in the /admin/bwdates-reports-details.php file...

CVE-2025-9830

CVE-2025-9830 affects PHPGurukul Beauty Parlour Management System 1.1. The vulnerability is a SQL injection in the file /admin/add-customer-services.php, triggered by manipulating the sids[] parameter. It is exploitable remotely and publicly available exploits exist. Reported by multiple sources ...

CVE-2025-9729

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The...

Online Course Registration admin/student-registration.php File SQL Injection Vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter studentname in the file /admin/student-registration.php. An...

CVE-2025-9793

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component Setting Handler. Performing manipulation of the argument ddlBranch results in sql injection. The attack is possible to be carried out...

CVE-2025-9793

The CVE-2025-9793 entry concerns itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the Setting Handler, exposed via /setting/admin.php, where manipulating the ddlBranch parameter enables remote exploitation. Public exploit appears available, and multiple connec...

CVE-2025-9793 itsourcecode Apartment Management System Setting admin.php sql injection

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component Setting Handler. Performing manipulation of the argument ddlBranch results in sql injection. The attack is possible to be carried out...

CVE-2025-9766

The CVE-2025-9766 entry corresponds to a SQL injection in itsourcecode Sports Management System 1.0, specifically in the file /Admin/facilitator.php where manipulation of the code parameter in an unknown function enables remote exploitation. Public exploits have been reported. Multiple connected ...

CVE-2025-9765

A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournamentdetails.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2025-9746

A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The...

CVE-2025-9729

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-9729

CVE-2025-9729 affects PHPGurukul Online Course Registration 3.1, where SQL injection is possible via the studentname parameter in /admin/student-registration.php. The root cause is unsanitized input leading to SQL injection, with remote exploitation confirmed. Multiple connected sources corrobora...

PHPGurukul Online Course Registration 安全漏洞

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter studentname in the file /admin/student-registration.php. An...

PT-2025-35410

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: A vulnerability exists in PHPGurukul Online Course Registration version 3.1. The vulnerability is due to SQL injection in the /admin/student-registration.php file. Manipulation of...

CVE-2025-54926

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause remote code execution when an authenticated attacker with admin privileges uploads a malicious file over HTTP which then gets executed...

CVE-2025-54926

CVE-2025-54926 affects Schneider Electric EcoStruxure Power Monitoring Expert (and Power Operation) with a directory traversal vulnerability that may enable remote code execution. The issue stems from improper validation in path handling (GetTgmlContent) and requires authenticated admin privilege...