CVE-2025-13300: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

PT-2020-20671

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin versions prior to 4.6.0.4 Description The issue allows remote authenticated users with minimal privileges to import custom vulnerable forms and change form settings via the class rm form settings controller.php file,...