66 matches found
CVE-2025-7138 SourceCodester Best Salon Management System admin-profile.php sql injection
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...
CVE-2025-7138: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...
CVE-2025-6913
A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument aemailid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-6913
PHPGurukul Student Record System 3.2 contains a SQL injection flaw in /admin-profile.php via the aemailid parameter. Exploitation can be remote and the vulnerability has been disclosed publicly. The root cause is unsafe handling of the aemailid input in an unknown function of /admin-profile.php, ...
CVE-2025-6913 PHPGurukul Student Record System admin-profile.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument aemailid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-6913: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument aemailid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-6333 PHPGurukul Directory Management System admin-profile.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-6333 PHPGurukul Directory Management System admin-profile.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-5638 PHPGurukul Notice Board System admin-profile.php sql injection
A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. Th...
CVE-2025-4916 PHPGurukul Auto Taxi Stand Management System admin-profile.php sql injection
A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely...
CVE-2025-4861 PHPGurukul Beauty Parlour Management System admin-profile.php sql injection
A vulnerability classified as critical was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched...
CVE-2025-44183
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the name, email, and mobile parameters...
CVE-2025-4703 PHPGurukul Vehicle Parking Management System admin-profile.php sql injection
A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...
CVE-2025-44183
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the name, email, and mobile parameters...
CVE-2025-4358 PHPGurukul Company Visitor Management System admin-profile.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument adminname/mobilenumber leads to sql injection. It is possible to launch the attack remotely...
CVE-2025-4358 PHPGurukul Company Visitor Management System admin-profile.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument adminname/mobilenumber leads to sql injection. It is possible to launch the attack remotely...
PT-2025-19947 · Unknown · Phpgurukul Company Visitor Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 2.0 Description: A critical vulnerability has been found in the PHPGurukul Company Visitor Management System. The issue affects an unknown function of the file /admin-profile.php. The...
CVE-2025-3370 PHPGurukul Men Salon Management System admin-profile.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploi...
CVE-2025-3370
Summary: CVE-2025-3370 affects PHPGurukul Men Salon Management System 1.0, with a SQL injection in the /admin/admin-profile.php endpoint triggered by manipulating the contactnumber parameter. The vulnerability can be exploited remotely and the exploit has been disclosed publicly. Other parameters...
CVE-2025-2646 PHPGurukul Art Gallery Management System admin-profile.php sql injection
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...