CVE-2025-13545 ashraf-kabir travel-agency index.php sql injection

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /adminarea/index.php. The manipulation of the argument editpack leads to sql injection. The attack can be...

SQL-INJECTION

SQL-INJECTION SQL Injection SQLi Demonstration Pro...

CampCodes Online Polling System SQL注入漏洞

CampCodes Online Polling System is an online polling system from CampCodes Philippines. Campcodes Online Polling System version 1.0 suffers from a SQL injection vulnerability that stems from a misuse of the parameter email in the file /registeracc.php, which may lead to SQL injection...

PT-2025-47848

Name of the Vulnerable Software and Affected Versions Campcodes Online Polling System version 1.0 Description A flaw exists in Campcodes Online Polling System 1.0 related to the manipulation of the myusername argument within the file '/admin/checklogin.php', potentially leading to SQL injection...

CampCodes Online Polling System SQL注入漏洞

CampCodes Online Polling System is an online polling system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Polling System version 1.0, which stems from an incorrect manipulation of the parameter myusername in the file /admin/checklogin.php, which may lead to...

WEB-APPLICATION-VULNERABILITY-SCANNER

WEB-APPLICATION-VULNERABILITY-SCANNER COMPANY: CODTECH IT S...

CVE-2025-13485

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-66095

CVE-2025-66095 affects the KiviCare – Clinic & Patient Management System WordPress plugin (versions ≤ 3.6.13). It is an authenticated SQL Injection vulnerability caused by improper neutralization of input. Impact per documentation: high, with potential data exposure/integrity concerns as describe...

EUVD-2025-198430

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to SQL Injection via the 'term' parameter in all versions up to, and including, 4.2.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2025-13138

The WP Directory Kit WordPress plugin is affected by an unauthenticated SQL injection in all versions up to 1.4.3, via the columns_search parameter of the select_2_ajax() function. The flaw stems from insufficient escaping of the user input and inadequate preparation of the existing SQL query, en...

CVE-2025-60798

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $REQUEST'query' directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute...

CVE-2025-13485 itsourcecode Online File Management System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-13410

A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and...

phppgadmin contains a SQL injection vulnerability

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $REQUEST'query' parameter without any sanitization or parameterization via $data-conn-Execute$REQUEST'query'. An authenticated...

EUVD-2025-198249

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

CVE-2025-13424

A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addproduct.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to...

CVE-2025-13424 Campcodes Supplier Management System add_product.php sql injection

A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addproduct.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to...

CVE-2025-52410

Institute-of-Current-Students v1.0 is vulnerable to a time-based blind SQL injection in the mydetailsstudent.php endpoint. The root cause is the lack of adequate sanitization of the myds GET parameter before it is used in SQL queries. This flaw could allow an attacker to perform malicious data in...

Complaint Management System subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of the subcategory and category parameters in subcategory.php against externally entered SQL statements. The vulnerability ca...

School Fees Payment Management System /ajax.php?action=login File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter Username in the file...