CVE-2026-3164: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...

CVE-2024-48704

The Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in the admin/contactus.php file. The root cause is a lack of effective filtering and escaping of user-supplied data in the pagedes parameter. An attacker can exploit this by injecting a carefully crafted payload to...

CVE-2025-1873

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...

CVE-2025-1873 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...

CVE-2023-37746

A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...