5 matches found
CVE-2025-10973
A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273. Affected by this issue is some unknown functionality of the file /admin/show.php. This manipulation of the argument userid causes sql injection. The attack may be initiated remotely. The...
Resume management system SQL注入漏洞
Resume management system is a resume management system by JackieDYH Personal Developer. A SQL injection vulnerability exists in the Resume management system, which stems from an incorrect manipulation of the parameter userid in the file /admin/show.php, which could lead to a SQL injection attack...
Hotel Managment System SQL Injection Vulnerability
Hotel Managment System is an open source hotel management system from Code-projects. Hotel Managment System version 1.0 suffers from a SQL injection vulnerability that originates from allowing SQL injection via the sid parameter in Hotel/admin/show.php...
CVE-2022-25574
A stored cross-site scripting XSS vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file...
DouCo DouPHP Cross-Site Scripting Vulnerability (CNVD-2019-00998)
DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/show.php?rec=update in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wi...