Lucene search
+L

2222 matches found

Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.10 views

PT-2025-34010 · Unknown · Webba Booking

Name of the Vulnerable Software and Affected Versions: Webba Booking versions through 5.1.20 Description: A missing authorization flaw exists in Webba Appointment Booking Webba Booking, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the moment,...

6.5CVSS6.1AI score0.00357EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/08/19 12:00 a.m.13 views

Online Appointment Booking System 1.0 SQL Injection

A remote SQL injection vulnerability exists in Online Appointment Booking System version 1.0 Code‑Projects in the file /admin/adddoctor.php. The username parameter is not properly sanitized, allowing remote attackers to execute arbitrary SQL queries time‑based, error‑based, union‑based,...

9.8CVSS8.4AI score0.00396EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/08/17 9:24 a.m.19 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS7.7AI score0.00403EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/15 9:15 a.m.18 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits0References5
NVD
NVD
added 2025/08/15 9:15 a.m.12 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS0.00403EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/08/15 9:02 a.m.6 views

CVE-2025-9024 PHPGurukul Beauty Parlour Management System book-appointment.php sql injection

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.6AI score0.00403EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/08/15 9:02 a.m.21 views

CVE-2025-9024 PHPGurukul Beauty Parlour Management System book-appointment.php sql injection

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS0.00403EPSS
SaveExploits0References5
CVE
CVE
added 2025/08/15 9:02 a.m.41 views

CVE-2025-9024

CVE-2025-9024 affects PHPGurukul Beauty Parlour Management System v1.1, specifically the /book-appointment.php file. The vulnerability is an SQL injection in the Message parameter, exploitable remotely with a disclosed exploit. Multiple sources confirm impact to the database (data exposure/altera...

9.8CVSS7.6AI score0.00403EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2025/08/15 12:00 a.m.9 views

PHPGurukul Beauty Parlour Management System 注入漏洞

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in t...

9.8CVSS8.1AI score0.00403EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/08/15 12:00 a.m.14 views

PT-2025-33469 · Phpgurukul · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A SQL injection issue exists in PHPGurukul Beauty Parlour Management System 1.1, specifically within the /book-appointment.php file. The Message parameter is susceptible to...

9.8CVSS7.4AI score0.00403EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in appointment-widget (npm)

The package appointment-widget was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-17841 Malicious code in customer-appointment-detail-widget (npm)

The package customer-appointment-detail-widget was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-14733 Malicious code in appointment-widget (npm)

The package appointment-widget was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.12 views

Malicious code in customer-appointment-detail-widget (npm)

The package customer-appointment-detail-widget was found to contain malicious code...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-6190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive...

4.3CVSS4.9AI score0.01362EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/07/30 12:59 a.m.9 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS7.4AI score0.00315EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/30 12:00 a.m.9 views

Doctor Appointment Management System Session Hijacking Vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...

7.5CVSS6.9AI score0.00315EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.8 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...

7.5CVSS6.8AI score0.00315EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/07/28 12:00 a.m.5 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

6.7AI score0.00315EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00315EPSS
SaveExploits0References4
Rows per page
Query Builder