EUVD-2024-27120

Malicious code in bioql PyPI...

EUVD-2023-12379

Malicious code in bioql PyPI...

CVE-2025-10100: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

CVE-2025-9788

SourceCodester/Campcodes School Log Management System 1.0 is affected by a SQL injection in an unknown functionality of /admin/admin_class.php. The vulnerability arises from manipulation of the id_no parameter and can be exploited remotely without authentication. Public disclosures exist describi...

CVE-2025-9788: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/adminclass.php. Executing manipulation of the argument idno can lead to sql injection. The attack can be launched remotely. Th...

CVE-2024-46375

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup function of the file rental/adminclass.php...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2024-6196

A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2024-48581

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...

CVE-2024-48581: Improper Control of Generation of Code

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...

CVE-2024-48581

The Best courier management system (version v.1.0 ) is vulnerable to a File Upload vulnerability in the admin_class.php component. A remote attacker can exploit this flaw to achieve arbitrary code execution . As no official patch is currently available, it is recommended to restrict access to the...

CVE-2024-46376: Improper Limitation of a Pathname to a Restricted Directory

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the updateaccount function of the file rental/adminclass.php...

CVE-2024-46376

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the updateaccount function of the file rental/adminclass.php...

CVE-2024-46377: Unrestricted Upload of File with Dangerous Type

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the savesettings function of the file rental/adminclass.php...

CVE-2024-46375: Improper Limitation of a Pathname to a Restricted Directory

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup function of the file rental/adminclass.php...

CVE-2024-46374

Best House Rental Management System 1.0 contains a SQL injection vulnerability in the deletecategory function of the file rental/adminclass.php...

CVE-2024-46374: Improper Neutralization of Special Elements used in an SQL Command

Best House Rental Management System 1.0 contains a SQL injection vulnerability in the deletecategory function of the file rental/adminclass.php...

CVE-2024-46374

SourceCodester Best House Rental Management System version 1.0 is vulnerable to a SQL injection vulnerability. The flaw exists within the delete_category() function located in the rental/admin_class.php file. This vulnerability allows for the improper neutralization of special elements used in SQ...

CVE-2024-8709 SourceCodester Best House Rental Management System admin_class.php save_user sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-8709: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...