CVE-2025-11475

CVE-2025-11475 affects projectworlds Advanced Library Management System 1.0. The vulnerability is in the /view_member.php endpoint where manipulating the user_id parameter enables SQL injection, with remote exploitation and publicly disclosed exploit. Impact is high/critical per sources, includin...

Projectworlds Advanced Library Management System 安全漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A security vulnerability exists in Projectworlds Advanced Library Management System version 1.0, which stems from an incorrect manipulation of the parameter userid in the file...

CVE-2025-11475: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

CVE-2025-4360

The CVE-2025-4360 entry affects itsourcecode Gym Management System 1.0. Affected functionality is in /view_member.php where manipulation of the ID parameter enables SQL injection. The vulnerability can be exploited remotely and exploits have been disclosed publicly. Reported scores across sources...

CVE-2025-4360 itsourcecode Gym Management System view_member.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The explo...

CVE-2025-4360: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The explo...

CVE-2022-30376: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/viewmember.php?id=...

CVE-2022-25096: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

Sql injection

Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...

CVE-2017-17829: Improper Neutralization of Special Elements used in an SQL Command

Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...

CVE-2008-6177: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in LightBlog 9.8, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 username parameter to viewmember.php, 2 usernamepost parameter to login.php, and the 3 Lightblogusername...

LightBlog 9.8 (GET POST COOKIE) Multiple LFI Vulnerabilities

No description provided by source. LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was...

LightBlog 9.8 - GET POST COOKIE Local File Inclusion

LightBlog 9.8 - GET POST COOKIE Local File Inclusion LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team -...

LightBlog 9.8 - 'GET' / 'POST' / 'COOKIE' Local File Inclusion

LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it...

Directory traversal

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

CVE-2008-0840: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in viewmember.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the username parameter...

LightBlog 9.6 (username) Local File Inclusion Vulnerability

No description provided by source. lightblog 9.6 local file inclusion vulnerability download http://www.publicwarehouse.co.uk/phpscripts/lightblog.php author muuratsalo contact muuratsaloatgmail.com exploit...

lightblog-lfi.txt

lightblog 9.6 local file inclusion vulnerability download http://www.publicwarehouse.co.uk/phpscripts/lightblog.php author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/LightBlog9.6/viewmember.php?username=../../../../../../../../../../etc/passwd%00...

lightblog 9.6 local file inclusion vulnerability

lightblog 9.6 local file inclusion vulnerability download http://www.publicwarehouse.co.uk/phpscripts/lightblog.php author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/LightBlog9.6/viewmember.php?username=../../../../../../../../../../etc/passwd00...

LightBlog 9.6 - Username Local File Inclusion

LightBlog 9.6 - Username Local File Inclusion lightblog 9.6 local file inclusion vulnerability download http://www.publicwarehouse.co.uk/phpscripts/lightblog.php author muuratsalo contact muuratsaloatgmail.com exploit...