CVE-2025-25991

The content management system hooskcms v.1.7.1 is susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can exploit the /install/index.php component to obtain sensitive information . While the vulnerability is confirmed, there is currently no information regarding a newer vers...

CVE-2025-25991: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...

CVE-2025-25990: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...

PT-2025-7119

Name of the Vulnerable Software and Affected Versions: hooskcms version 1.7.1 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the "/install/index.php" component. Recommendations: For hooskcms version 1.7.1, update to a version that fixes this...

Brute Force

Overview alextselegidis/easyappointments is a powerful Open Source Appointment Scheduler that can be installed on your server. Affected versions of this package are vulnerable to Brute Force through the index.php file. Remediation There is no fixed version for alextselegidis/easyappointments...

Easy!Appointments Improper Restriction of Excessive Authentication Attempts

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

Easy!Appointments Improper Restriction of Excessive Authentication Attempts

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

CVE-2024-57602

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

CVE-2025-1213

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

CVE-2025-1213

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

CVE-2025-1213 pihome-shc PiHome index.php cross site scripting

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

CVE-2024-57602: Improper Privilege Management

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

PT-2025-6751

Name of the Vulnerable Software and Affected Versions Alex Tselegidis EasyAppointments version 1.5.0 Description An issue in Alex Tselegidis EasyAppointments allows a remote attacker to escalate privileges via the "index.php" file. Recommendations For version 1.5.0, consider restricting access to...

PT-2025-6854

Name of the Vulnerable Software and Affected Versions pihome-shc PiHome version 1.77 Description A problem has been found in the /index.php file, affecting some unknown functionality. The issue is related to the manipulation of the $ SERVER'PHP SELF' argument, which leads to cross site scripting...

CVE-2025-1213: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

CVE-2024-57602

CVE-2024-57602 concerns EasyAppointments v1.5.0. Multiple connected sources confirm a vulnerability in the application where a missing permission validation in the file index.php enables a remote attacker to escalate privileges. The issue is described as unauthenticated, network-based, with HIGH ...

CVE-2024-57602

An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...

PT-2025-6116 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue affects some unknown functionality of the file index.php, where the manipulation of the username and password arguments leads to the use of default credential...

CVE-2025-1160: Use of Default Credentials

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...

PT-2025-6005

Name of the Vulnerable Software and Affected Versions LDAP User Manager versions = ce92321 Description A reflected Cross-Site Scripting XSS issue has been identified, specifically in the "/setup/index.php" endpoint via the returnto parameter. This arises due to improper sanitization of...