CVE-2025-3553: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pedelete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brandid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-29389

PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2tab=t2...

PT-2025-15698 · Pbootcms · Pbootcms

Name of the Vulnerable Software and Affected Versions: PbootCMS version 3.2.9 Description: The issue is related to a XSS vulnerability. It affects the "admin.php?p=/Content/index/mcode/2tab=t2" endpoint. Recommendations: For PbootCMS version 3.2.9, update to a version that fixes this issue, as th...

CVE-2025-29389: Improper Neutralization of Input During Web Page Generation

PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2tab=t2...

CVE-2025-3244: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...

CVE-2025-25877

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data...

CVE-2025-25877

A vulnerability exists in ITSourcecode Simple ChatBox versions up to 1.0 . The flaw affects unknown code within the /admin.php file, where an attacker can perform an SQL injection to obtain sensitive data. As a temporary workaround, users should restrict access to the /admin.php file and avoid us...

CVE-2025-25877

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data...

CVE-2025-25877: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data...

PT-2025-5983

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9 Description A critical issue has been discovered, affecting the deletedir action/restore action function in the lib/admin/database admin.php library. This leads to path traversal and can be initiated remotely. The issue...

CVE-2025-0842

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack may be initiated remotely. The...

CVE-2022-3973

A vulnerability classified as critical has been found in Pingkon HMS-PHP. Affected is an unknown function of the file /admin/admin.php of the component Data Pump Metadata. The manipulation of the argument uname/pass leads to sql injection. It is possible to launch the attack remotely. The exploit...

PT-2025-4119

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9 Description A critical vulnerability was found in CmsEasy, affecting the function backAll action in the library lib/admin/database admin.php of the file "/index.php?case=database&act=backAll&admin dir=admin&site=default...

CVE-2025-0842

CVE-2025-0842 affects the needyamin Library Card System 1.0, specifically the Login component's admin.php. The vulnerability arises from improper handling of the email and password parameters, enabling SQL injection. CVE entries and related advisories indicate remote exploitation with publicly di...

CVE-2025-0842 needyamin Library Card System Login admin.php sql injection

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-0842: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-11992

Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter i...

CVE-2024-11992 Path traversal vulnerability in Quick.CMS

Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter i...

CVE-2024-11992

CVE-2024-11992 concerns Quick.CMS v6.7. The vulnerability is an absolute path traversal in admin.php reachable via the aDirFiles%5B0%5D parameter, allowing remote attackers to bypass restrictions and download files outside the document root if permissions exist, and potentially delete server file...

PT-2024-17387

Name of the Vulnerable Software and Affected Versions Quick.CMS version 6.7 Description The issue is an absolute path traversal vulnerability that could allow remote users to bypass intended restrictions and download any file if it has the appropriate permissions outside of documentroot configure...