PT-2025-20627 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been discovered, affecting the /pages/creditor add.php file, which can lead to sql injection. This issue can be exploited remotely. Recommendations: For...

PT-2025-20646

Name of the Vulnerable Software and Affected Versions Discord version 1.0.9188 Description A critical issue has been found in Discord, affecting some unknown functionality in the library WINSTA.dll. This issue leads to an uncontrolled search path. The attack must be approached locally and has a...

PT-2025-20638 · Inetum · Inetum Iodas

Name of the Vulnerable Software and Affected Versions: Inetum IODAS versions 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7 Description: A problematic issue has been discovered, affecting an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the action argument leads to cross-site...

PT-2025-20585 · Unknown · Project Worlds Student Project Allocation System

Name of the Vulnerable Software and Affected Versions: Project Worlds Student Project Allocation System version 1.0 Description: A critical vulnerability was found in the system, affecting an unknown functionality of the file /change pass/forgot password sql.php. The manipulation of the argument...

PT-2025-20592

Name of the Vulnerable Software and Affected Versions Gym Management System version 1.0 Description A critical issue has been identified in the Gym Management System, affecting an unknown functionality of the file /ajax.php?action=delete package. The manipulation of the ID argument leads to SQL...

PT-2025-20590

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue affects the processing of the file "/ajax.php?action=delete plan". The manipulation of the ID argument leads to SQL injection. The attack may be initiated remotely...

PT-2025-20597 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /view-ticket-admin.php. The manipulation of the ID argument leads to SQL injection. This issue can be...

PT-2025-20480

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file "/ajax.php?action=save plan". The manipulation of the plan argument leads to SQL injection...

PT-2025-20467 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System. The problem affects some unknown functionality of the file fecalysis form.php. The manipulation of the...

PT-2025-20461 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System. The problem affects an unknown functionality of the file /edit upatient.php. The manipulation of the I...

PT-2025-20589

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System, affecting the file /ajax.php?action=delete trainer. The manipulation of the ID argument leads to SQL injectio...

PT-2025-20485 · WordPress · 1 Click Wordpress Migration Plugin

Name of the Vulnerable Software and Affected Versions: The 1 Click WordPress Migration Plugin versions prior to 2.3 Description: The issue is related to a missing capability check on the start restore function, allowing authenticated attackers with Subscriber-level access and above to upload...

PT-2025-20444 · H3C · H3C Gr-5400Ax

Name of the Vulnerable Software and Affected Versions: H3C GR-5400AX versions up to 100R008 Description: A critical issue has been found that affects the Edit List SSID function of the /goform/aspForm file. The manipulation of the param argument leads to a buffer overflow. This issue can be...

PT-2025-20542 · Unknown · Sourcecodester Online Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Clearance System version 1.0 Description: A problematic issue has been found in the system, where the manipulation of the Username argument leads to cross-site scripting. This can be launched remotely. The issue...

PT-2025-20591

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System. The problem is related to an unknown function of the file /ajax.php?action=delete member, where the...

PT-2025-20460 · Unknown · Project Worlds Car Rental Project

Name of the Vulnerable Software and Affected Versions: Project Worlds Car Rental Project version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/approve.php. The manipulation of the ID argument leads to SQL injection. This issue c...

PT-2025-24423 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection vulnerability in the Service Account Auditing reports of the affected software. Recommendations: For Zohocorp ManageEngi...

PT-2025-20586

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System, affecting some unknown functionality of the file /view pdetails.php. The manipulation of the ID argument lead...

PT-2025-20575

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to SQL Injection through the superadmin phpmyadmin.php file. The issue allows for potential...

PT-2025-20482

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System. The problem affects the /ajax.php?action=save payment API endpoint, where the manipulation of the registratio...