Lucene search
+L

756 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•8 views

CVE-2025-3168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•23 views

Art Gallery Management System edit-art-product-detail.php file SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editide/sprice/description of...

9.8CVSS8.3AI score0.00527EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/23 7:15 a.m.•12 views

CVE-2025-2642

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/edit-art-product-detail.php?editid=2. The manipulation of the argument editide/sprice/description leads to sql injection. It is possible to...

9.8CVSS5.7AI score0.00527EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/03/23 12:00 a.m.•3 views

PT-2025-12525

Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Art Gallery Management System. This issue affects the file /admin/edit-art-product-detail.php and allows for SQL injection...

9.8CVSS0.00527EPSS
SaveExploits1References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•5 views

CVE-2025-2642: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/edit-art-product-detail.php?editid=2. The manipulation of the argument editide/sprice/description leads to sql injection. It is possible to...

9.8CVSS7AI score0.00527EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•5 views

CVE-2025-2641: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-artist-detail.php?editid=1. The manipulation of the argument Name leads to sql injection. The attack may ...

9.8CVSS6.9AI score0.00527EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/23 12:00 a.m.•4 views

PT-2025-12526

Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability has been found in the PHPGurukul Art Gallery Management System. This issue affects the file /admin/edit-art-type-detail.php and can be exploited remotely...

9.8CVSS0.00527EPSS
SaveExploits1References17
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•4 views

PT-2025-10023

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue has been found in the code-projects Blood Bank Management System. The vulnerability affects an unknown functionality of the file /admin/edit state.php. The...

7.2CVSS0.00611EPSS
SaveExploits1References11
OSV
OSV
•added 2025/02/13 5:17 p.m.•11 views

CVE-2025-25388

A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the editid GET request parameter...

9.8CVSS6.1AI score0.00793EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/13 12:00 a.m.•6 views

PT-2025-7088

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A SQL Injection issue was found in the /admin/edit-propertytype.php file, allowing remote attackers to execute arbitrary code via the editid GET request parameter. Recommendations: For...

9.8CVSS0.00793EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•15 views

PHPGurukul Land Record System 安全漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul. A security vulnerability exists in PHPGurukul Land Record System version v1.0, which originates from an SQL injection vulnerability contained in the editid parameter of the /admin/edit-propertytype.php file...

9.8CVSS7.9AI score0.00793EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•3 views

CVE-2025-25388: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the editid GET request parameter...

9.8CVSS6.5AI score0.00793EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/12 3:15 p.m.•21 views

CVE-2025-1202

A vulnerability classified as critical has been found in SourceCodester Best Church Management Software 1.1. Affected is an unknown function of the file /admin/editslider.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS5.7AI score0.00386EPSS
SaveExploits1References5
OSV
OSV
•added 2025/02/12 12:15 p.m.•24 views

CVE-2025-1195

A vulnerability, which was classified as problematic, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/EditCategory. The manipulation of the argument CategoryId leads to cross site scripting. The attack may b...

5.4CVSS4AI score0.0034EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/02/12 12:00 a.m.•22 views

PT-2025-6847 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.1 Description: A critical issue has been found in the software, affecting an unknown function of the file /admin/edit slider.php. The manipulation of the id argument leads to SQL...

6.5CVSS7.4AI score0.00386EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2025/02/05 1:45 p.m.•19 views

CVE-2020-13566

SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability In admin/editgroup.php, when the POST parameter action is “Delete”, the POST parameter deletegroup leads to a SQL...

8.8CVSS8AI score0.01576EPSS
SaveExploits1
OSV
OSV
•added 2025/02/03 12:00 a.m.•17 views

CVE-2025-25062

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor is used. This allows a potential attacker to craft specialized HTML and JavaScript that may be executed when an...

4.4CVSS5.5AI score
SaveExploits0References5
OSV
OSV
•added 2025/01/17 8:15 p.m.•14 views

CVE-2025-0536

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.5AI score0.0055EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/17 12:00 a.m.•17 views

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Attendance Tracking Management System, which originates from the parameter attendanceid in file...

9.8CVSS7.1AI score0.0055EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•7 views

PT-2025-3942

Name of the Vulnerable Software and Affected Versions 1000 Projects Attendance Tracking Management System version 1.0 Description A critical vulnerability was found in the 1000 Projects Attendance Tracking Management System. This issue affects unknown code of the file /admin/edit action.php. The...

9.8CVSS0.0055EPSS
SaveExploits1References11
Rows per page
Query Builder