CVE-2025-55731 Frappe has the possibility of Authenticated SQL Injection due to improper validations

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15...

CVE-2025-54048 WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in miniOrange Custom API for WP custom-api-for-wp allows SQL Injection.This issue affects Custom API for WP: from n/a through = 4.2.2...

Medical Store Management System UpdateCompany.java File SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter companyNameTxt in the file UpdateCompany.java. An...

Hospital Management System SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter doctorspecilization in the file...

PT-2025-34139 · Portabilis · Portabilis I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions prior to 2.10 Description: A vulnerability exists in Portabilis i-Diario up to version 2.10. The issue affects an unknown function within the /intranet/educar tipo usuario lst.php file of the Tipos de usàrio Page...

WordPress plugin Custom API for WP SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WellChoose Organization Portal System SQL Injection Vulnerability

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. The WellChoose Organization Portal System suffers from a SQL injection vulnerability that arises from the application's lack of validation of externally entered SQL statements. The...

Visitor Management System query_data.php File SQL Injection Vulnerability

Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter dateF/dateP in the file /querydata.php. An attacker can exploit...

Frappe Technologies Frappe SQL注入漏洞

Frappe Technologies Frappe is a Python, Mariadb-based and integrated front-end page web development framework from Frappe Technologies, India. A security vulnerability exists in Frappe Technologies Frappe version 15.74.2 and versions prior to 14.96.15, which stems from a specially crafted request...

PT-2025-34013 · WordPress · Miniorange Custom Api For Wp

Name of the Vulnerable Software and Affected Versions: miniOrange Custom API for WP versions through 4.2.2 Description: The software contains an improper neutralization of special elements used in an SQL command, leading to a SQL injection issue. This allows for SQL injection attacks...

Swatadru Exam-Seating-Arrangement 安全漏洞

Swatadru Exam-Seating-Arrangement is an exam seat reservation system by the individual developer Swatadru Paul. A security vulnerability exists in Swatadru Exam-Seating-Arrangement, which stems from a SQL injection attack due to incorrect manipulation of the parameter email in the file /student.p...

Job Diary edit-details.php file SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /edit-details.php. An attacker can exploit this vulnerability to execute illegal SQL commands to stea...

Hospital Management System edit-doctor.php file SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...

PT-2025-34142

Name of the Vulnerable Software and Affected Versions: Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f Description: A vulnerability exists in Swatadru Exam-Seating-Arrangement. Manipulation of the email argument in the /student.php file within the Student Login...

CVE-2025-9156

A vulnerability was found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/sports.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public...

CVE-2025-9155

CVE-2025-9155 affects the itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is in the file /user/forget_password.php where manipulation of the email parameter leads to a SQL injection. The issue is exploitable remotely and the exploit has been disclosed to the public. R...

CVE-2025-9155 itsourcecode Online Tour and Travel Management System forget_password.php sql injection

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Impacted is an unknown function of the file /user/forgetpassword.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to...

CVE-2025-9150 Surbowl dormitory-management-php violation_add.php sql injection

A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violationadd.php?id=2. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote...

CVE-2025-9148 CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. The attack can be executed...

CVE-2025-9148

CVE-2025-9148 affects CodePhiliaX Chat2DB up to 0.3.7, specifically the JDBC Connection Handler’s DataSourceController.java. The vulnerability is a SQL injection in an unknown function of that file, enabling remote exploitation. Public exploits have been disclosed. Multiple sources corroborate re...