Lucene search
+L

60 matches found

NVD
NVD
•added 2026/09/15 1:16 a.m.•15 views

CVE-2026-90846

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/15 12:45 a.m.•33 views

CVE-2026-90846 PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 12:45 a.m.•16 views

CVE-2026-90846 PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•25 views

PT-2026-91776

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•2 views

CVE-2026-90846: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS5.5AI score0.00431EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/05 7:44 p.m.•16 views

CVE-2026-39110

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page forgot-password.php. This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve...

8.2CVSS5.7AI score0.00496EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/20 12:00 a.m.•10 views

CVE-2026-39110

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page forgot-password.php. This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve...

5.8AI score0.00496EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/20 12:00 a.m.•13 views

CVE-2026-39110

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page forgot-password.php. This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve...

8.2CVSS5.8AI score0.00496EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/20 12:00 a.m.•24 views

CVE-2026-39110

The Apartment Visitors Management System V1.1 , developed by PHPGurukul Corporation , contains an SQL Injection vulnerability in the contactno parameter of the forgot-password.php page. This flaw allows an unauthenticated attacker to manipulate backend SQL queries during the authentication proces...

8.2CVSS5.8AI score0.00496EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/20 12:00 a.m.•2 views

CVE-2026-39110: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page forgot-password.php. This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve...

8.2CVSS5.9AI score0.00496EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•15 views

Online Shopping Portal login.php File SQL Injection Vulnerability

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of externally-entered SQL statements for the fullname, emailid, and contactno parameters in login.php. An attacker can exploit this vulnerability to execute...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•24 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/17 7:16 p.m.•13 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/17 12:00 a.m.•25 views

CVE-2024-44660

The PHPGurukul Online Shopping Portal version 2.0 is vulnerable to SQL Injection due to a lack of validation for externally entered SQL statements. This vulnerability exists in the login.php file, specifically affecting the fullname , emailid , and contactno parameters. An attacker can exploit th...

7.6AI score0.0024EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•13 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of externally-entered SQL statements for the fullname, emailid, and contactno parameters in login.php. An attacker can exploit this vulnerability to execute...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•18 views

PT-2025-47197

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal version 2.0 is susceptible to SQL Injection. This issue affects the login.php file and specifically involves the fullname, emailid, and contactno...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•1 views

CVE-2024-44660: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-26526

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.0048EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/03 3:15 p.m.•13 views

CVE-2025-57147

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multiple parameters including fullname, email, and contactno in user/registration.php...

7.5CVSS5.9AI score0.0048EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•2 views

CVE-2025-57147: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multiple parameters including fullname, email, and contactno in user/registration.php...

7.5CVSS5.8AI score0.0048EPSS
SaveExploits1References1
Rows per page
Query Builder