Blogbook 注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and earlier versions have an injection vulnerability that stems from SQL injection of the parameter postid in the file /admin/viewallposts.php...

CVE-2025-5229: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotel...

CampCodes Online Hospital Management System 注入漏洞

CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which is caused by a SQL injection due to incorrect manipulation of the viewid parameter in...

CVE-2024-37620

PHPVOD v4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /view/admin/view.php...

CVE-2024-7280

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/viewreserved.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-10300

A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/view-enquiry.php of the component View Enquiry Page. The manipulation of the argument viewid leads to sql injection. Th...

CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

CVE-2025-4911: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4705: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /admin/view-incomingvehicle-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attac...

CVE-2025-44193

SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangaymanagement/admin/?page=viewcomplaint...

CVE-2025-44192

SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangaymanagement/admin/?page=viewclearance...

CVE-2025-4080

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

PHPGurukul Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Nurse Hiring System, which stems from improper handling of the parameter viewid in the file /admin/view-request.php, which could lea...

CVE-2025-4080: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

CVE-2025-3978: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/userset.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclos...

Lecms 访问控制错误漏洞

Lecms is a multi-million large data bearing web content management system developed by Lecms Inc. in PHP language. An access control error vulnerability exists in Lecms version 3.0.3, which originates from an incorrect operation of the file admin/view/default/userset.htm that leads to information...

CVE-2025-3828: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/view-appointment.php?viewid=11. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. T...

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Men Salon Management System, which results from SQL injection due to incorrect manipulation of the parameter mark in the file...

CVE-2025-2648: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/view-enquiry-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The explo...

PT-2025-12530

Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability has been found in PHPGurukul Art Gallery Management System. This affects an unknown part of the file /admin/view-enquiry-detail.php. The manipulation of...