32 matches found
CVE-2026-9383
The CVE affects itsourcecode Electronic Judging System 1.0. The vulnerability exists in /intrams/admin/login.php where manipulation of the Username parameter enables SQL injection. This allows remote exploitation, as stated. The exploit is public. No additional remediation details are provided in...
CVE-2026-2057
A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...
CVE-2025-65881
CVE-2025-65881 affects Sourcecodester Zoo Management System v1.0, with a stored/reflected Cross Site Scripting (XSS) flaw in the /classes/Login.php endpoint. The connected sources consistently identify the vulnerability as an XSS issue tied to that login script; no other product versions or compo...
itsourcecode Student Transcript Processing System SQL注入漏洞
itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Transcript Processing System, which stems from an incorrect manipulation of the parameter uname in the...
EUVD-2008-7050
Malware in sbrugna...
EUVD-2024-23278
Malicious code in bioql PyPI...
CVE-2025-10118
A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...
Code-Projects Simple Grading System 安全漏洞
Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /login.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
CVE-2025-27724
A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability...
CVE-2025-7925 PHPGurukul Online Banquet Booking System login.php cross site scripting
A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument userlogin/userpassword leads to cross site scripting. The attac...
PT-2025-30139 · Unknown · Church Donation System
Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A vulnerability exists in Church Donation System 1.0. The issue is a SQL injection affecting an unknown functionality of the file /login.php. Manipulation of the Username argument can lead to...
CVE-2025-5716 SourceCodester Open Source Clinic Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
PT-2025-23787 · Unknown · Codeastro Real Estate Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /login.php. The manipulation of the email argument leads to SQL injection. It is possible to...
PT-2025-22945 · Unknown · Phpgurukul Student Record System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical vulnerability was found in the PHPGurukul Student Record System, affecting the file /login.php. The manipulation of the ID argument leads to SQL injection. The attack can b...
CVE-2025-4174 PHPGurukul COVID19 Testing Management System login.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely...
CVE-2024-12884 Codezips E-Commerce Website login.php sql injection
A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...
PT-2024-27800 · Unknown · Itsourcode Online Discussion Forum Project In Php With Source Code
Name of the Vulnerable Software and Affected Versions: Itsourcecode Online Discussion Forum Project in PHP with Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the email parameter in the "login.php" file...
CVE-2024-2673 Campcodes Online Job Finder System login.php sql injection
A vulnerability classified as critical has been found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-0474 code-projects Dormitory Management System login.php sql injection
A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit h...
Hospital Management System SQL注入漏洞
A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from a lack of validation of externally...