EUVD-2021-30436

Malicious code in bioql PyPI...

EUVD-2021-30439

Malicious code in bioql PyPI...

EUVD-2022-34286

Malicious code in bioql PyPI...

EUVD-2022-34287

Malicious code in bioql PyPI...

EUVD-2022-34288

Malicious code in bioql PyPI...

EUVD-2022-34285

Malicious code in bioql PyPI...

EUVD-2022-34289

Malicious code in bioql PyPI...

EUVD-2022-34290

Malicious code in bioql PyPI...

EUVD-2022-34070

Malicious code in bioql PyPI...

EUVD-2022-34072

Malicious code in bioql PyPI...

EUVD-2022-34073

Malicious code in bioql PyPI...

EUVD-2022-34074

Malicious code in bioql PyPI...

EUVD-2022-32164

Malicious code in bioql PyPI...

CVE-2025-8422: External Control of File Name or Path

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the sendemail function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...

CVE-2024-30990

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter...

CVE-2024-30987

Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters...

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2024-30989

Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter...

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

CVE-2024-51209

Cross-Site Scripting XSS vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page...