PHPGurukul Hospital Management System Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter viewid in the file view-medhistory.php. An attack...

Code-Projects Crime Reporting System Injection Vulnerability

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /userlogin.php. An attacker can exploit this vulnerability to...

Code-Projects Student Enrollment System Injection Vulnerability

Code-Projects Student Enrollment System is an open source student management system from Code-Projects. An injection vulnerability exists in code-projects Student Enrollment System version 1.0, which stems from improper manipulation of the parameter Username in the file /login.php, which could le...

PHPGurukul Cyber Cafe Management System and CampCodes Cyber Cafe Management System have injection vulnerabilities

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /index.php. An attacker can exploit this...

PHPGurukul Zoo Management System Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cprice in the file /admin/add-foreigners-ticket.php. An attacker can exploit this...

Code-Projects Library System Injection Vulnerabilities

Library System is a library system. The Library System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /notapprove.php. An attacker can exploit this vulnerability to execute illegal SQL commands t...

CVE-2025-7134

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteapplication. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T...

CVE-2025-7130

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletepayroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2025-7127

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack...

CVE-2025-7121

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/complaint-details.php. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The explo...

CVE-2025-7102

A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be initiated remotely. The exploit has...

Itsourcecode Employee Management System security vulnerabilities

itsourcecode Employee Management System is a itsourcecode open source employee management system. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter currentpassword in the file...

CampCodes Complaint Management System Injection Vulnerability

CampCodes Complaint Management System is a complaint management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Complaint Management System version 1.0, which stems from improper handling of the parameters cid/uid in the file /admin/complaint-details.php, which...

Simple forum forum_edit.php file SQL Injection Vulnerability

Simple forum is a simple forum. Simple forum suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter iii in file /forumedit.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

CampCodes Complaint Management System Injection Vulnerability

CampCodes Complaint Management System is a complaint management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Complaint Management System version 1.0, which stems from improper handling of the parameter email in the file /users/checkavailability.php, which coul...

CampCodes Advanced Online Voting System has a vulnerability

CampCodes Advanced Online Voting System is an advanced online voting system from CampCodes, Inc. An injection vulnerability exists in CampCodes Advanced Online Voting System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/candidatesdelete.php, resulting...

Simple forum signin.php file SQL injection vulnerability

Simple forum is a simple forum. Simple forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter User in the file /signin.php. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...

Simple forum register1.php file SQL Injection Vulnerability

Simple forum is a simple forum. Simple forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter User in the file /register1.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

Car Rental System book_car.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /bookcar.php. The vulnerability can be exploited to execute illegal SQL...

Student Record System manage-students.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /manage-students.php. An attacker can exploit this vulnerability to...