78 matches found
CVE-2025-4874 PHPGurukul News Portal Project contactus.php sql injection
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be launched remotely. The exploit ha...
CVE-2025-4874 PHPGurukul News Portal Project contactus.php sql injection
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be launched remotely. The exploit ha...
CVE-2025-4765
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-4765 PHPGurukul Zoo Management System contactus.php sql injection
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
PT-2025-21628 · Unknown · Phpgurukul Zoo Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue was found in the PHPGurukul Zoo Management System. The problem affects an unknown function of the file /admin/contactus.php. The manipulation of the mobnum argument...
CVE-2025-2737 PHPGurukul Old Age Home Management System contactus.php sql injection
A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-2627 PHPGurukul Art Gallery Management System contactus.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely...
CVE-2025-1873
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2025-1873 SQL injection vulnerability in 101news
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2024-13013 PHPGurukul Maid Hiring Management System Contact Us Page contactus.php cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /admin/contactus.php of the component Contact Us Page. The manipulation of the argument page title leads to cross site scripting. It is...
CVE-2024-2716 Campcodes Complete Online DJ Booking System contactus.php cross site scripting
A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/contactus.php. The manipulation of the argument email leads to cross site scripting. It is possible to initiate the attack remotely...
CVE-2024-2716
CVE-2024-2716 affects Campcodes Complete Online DJ Booking System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/contactus.php file, triggered by manipulating the email parameter. It can be exploited remotely and has been disclosed publicly (VDB-257469). Impact details in the...
CVE-2023-37746
CVE-2023-37746 describes a cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0. The flaw resides in the Title parameter of the "/admin/contactus.php" component, allowing an attacker to inject and execute arbitrary web scripts or HTML. Affected product: Maid Hiring Manag...
CVE-2023-37746
A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...
ArabInfotech L.L.C CMS 2.0 Cross Site Scripting
==================================================================================================================================== | Title : ArabInfotech L.L.C CMS v2.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit | ...
CVE-2023-2206
A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Sql injection
A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2023-2206
CVE-2023-2206 affects Campcodes Retro Basketball Shoes Online Store version 1.0, with a vulnerability in the file contactus.php where the email argument is susceptible to SQL injection . The issue allows remote exploitation and has been disclosed publicly. Multiple connected sources corroborate a...
CVE-2023-2206 Campcodes Retro Basketball Shoes Online Store contactus.php sql injection
A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Doctor Appointment System SQL Injection Vulnerability (CNVD-2021-22960)
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...