8 matches found
CVE-2025-12227
A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /add-pass.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may b...
CVE-2025-12227 projectworlds Gate Pass Management System add-pass.php cross site scripting
A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /add-pass.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may b...
PT-2025-43881
Name of the Vulnerable Software and Affected Versions projectworlds Gate Pass Management System version 1.0 Description A flaw exists in projectworlds Gate Pass Management System that allows for cross site scripting. The issue is located in an unknown function within the /add-pass.php file. This...
CVE-2025-12227: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /add-pass.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may b...
CVE-2025-11557: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...
Projectworlds Gate Pass Management System SQL注入漏洞
Projectworlds Gate Pass Management System is a gate management system for Projectworlds. A SQL injection vulnerability exists in Projectworlds Gate Pass Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /add-pass.php, which could lead ...
CVE-2025-5976
CVE-2025-5976 affects PHPGurukul Rail Pass Management System 1.0. The vulnerability resides in /admin/add-pass.php where manipulation of the fullname parameter triggers cross-site scripting. Exploitation can be performed remotely, and disclosures exist in multiple sources. Some connected document...
CVE-2025-5976: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/add-pass.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The...