251 matches found
PT-2025-44743
Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System version 1.0 where manipulation of the id/ini weight argument in the file '/admin/update-progress.php' can lead to SQL injection. This issu...
CVE-2025-41021 Stored Cross-Site Scripting (XSS) vulnerability in Sergestec's Exito
Stored Cross-Site Scripting XSS in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=productupdate'. This vulnerability could allow a remote user to send a specially...
CVE-2025-11668
A vulnerability was determined in code-projects Automated Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/updateuser.php. This manipulation of the argument Password causes sql injection. The attack is possible to be carried out remotely. The exploit has...
CVE-2025-11668
CVE-2025-11668 affects code-projects Automated Voting System 1.0, with vulnerability in the file /admin/update_user.php. The issue arises from lack of validation of the Password parameter, allowing remote SQL injection. Multiple connected sources confirm that an attacker can exploit this to execu...
PT-2025-41770
Name of the Vulnerable Software and Affected Versions code-projects Automated Voting System version 1.0 Description A flaw exists in code-projects Automated Voting System that allows for remote SQL injection. The issue is located in the /admin/update user.php file, specifically through manipulati...
EUVD-2025-33848
The Page Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the adminprocesswidgetpagechange function. This makes it possible for unauthenticated attackers to modify widget pa...
CVE-2025-11605: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...
EUVD-2022-49000
Malicious code in bioql PyPI...
EUVD-2022-43643
Malicious code in bioql PyPI...
SourceCodester Online Exam Form Submission 安全漏洞
SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A security vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from an incorrect manipulation of the parameter credits in the file /admin/updates3.php,...
CVE-2025-10593
A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...
SourceCodester Online Student File Management SQL注入漏洞
SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A SQL injection vulnerability exists in SourceCodester Online Student File Management version 1.0, which originates from incorrect manipulation of the parameter studentid in the fi...
PT-2025-38288
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection flaw exists due to manipulation of the credits argument in the /admin/update s3.php file. Remote exploitation is possible. The exploit has been published...
PT-2025-38149
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A SQL injection issue exists in the /admin/update student.php file due to manipulation of the stud id argument. This allows for remote exploitation. The exploit is...
CVE-2025-9932: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...
CVE-2025-9932 PHPGurukul Beauty Parlour Management System update-image.php sql injection
A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...
PT-2025-35848
Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A flaw exists in PHPGurukul Beauty Parlour Management System 1.1 within the file /admin/update-image.php. Manipulation of the lid argument can lead to SQL injection,...
code-projects Exam Form Submission 注入漏洞
Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates5.php. An attacker can exploit this vulnerability to execute illegal SQL...
CVE-2025-8273
A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates8.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-8272
A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updatefst.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has...