Lucene search
+L

10440 matches found

CNNVD
CNNVD
•added 2025/05/17 12:00 a.m.•15 views

SourceCodester Doctors Appointment System Injection Vulnerability

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.1AI score0.00562EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/05/16 4:15 p.m.•23 views

CVE-2025-48137

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in proxymis Interview allows SQL Injection. This issue affects Interview: from n/a through 1.01...

6.5CVSS8.4AI score0.00342EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/05/16 2:15 p.m.•21 views

CVE-2025-4778

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The...

8.8CVSS6.4AI score0.00462EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/16 1:15 p.m.•22 views

CVE-2025-4777

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. Th...

8.8CVSS6.3AI score0.00462EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/16 12:15 p.m.•16 views

CVE-2025-4772

A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php. The manipulation of the argument department leads to sql injection. The attack can be launched...

9.8CVSS7AI score0.00639EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/16 9:15 a.m.•14 views

CVE-2025-4766

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotel...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•22 views

SourceCodester Stock Management System security vulnerabilities

SourceCodester Stock Management System is an open source inventory management system from SourceCodester. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file...

8.8CVSS6.5AI score0.00525EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•13 views

PHPGurukul Human Metapneumovirus Testing Management System injection vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

9.8CVSS7.4AI score0.00702EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•20 views

PHPGurukul Online Course Registration Security Vulnerabilities

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter department in the file /admin/department.php. An attacker can...

9.8CVSS7.4AI score0.00639EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•12 views

WordPress plugin Magic Responsive Slider has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

8.5CVSS8.4AI score0.0044EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•17 views

SeaweedFS SQL Injection Vulnerability

SeaweedFS is SeaweedFS open source a fast distributed storage system for blobs, objects, files and data lakes. A security vulnerability exists in SeaweedFS version 3.68, which stems from a SQL injection vulnerability in component /abstractsql/abstractsqlstore.go...

6.5CVSS8.3AI score0.00264EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•17 views

PHPGurukul Beauty Parlour Management System Injection Vulnerability

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally-entered SQL statement in...

9.8CVSS7.4AI score0.00562EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•20 views

PHPGurukul Complaint Management System Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in the file /admin/admin-profile.php. An attacker can...

9.8CVSS7.4AI score0.00532EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•22 views

PHPGurukul Zoo Management System Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobnum in the file /admin/contactus.php. An attacker can exploit this vulnerability ...

9.8CVSS7.4AI score0.00562EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•15 views

PHPGurukul Park Ticketing Management System Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter viewid in the file /view-normal-ticket.php. An...

8.8CVSS6.8AI score0.00462EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•15 views

PHPGurukul Human Metapneumovirus Testing Management System injection vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter...

9.8CVSS7.4AI score0.00702EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•20 views

PHPGurukul Park Ticketing Management System Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter email/contactno in the file /forgot-password.php. A...

8.8CVSS6.8AI score0.00655EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•18 views

SourceCodester Stock Management System security vulnerabilities

SourceCodester Stock Management System is an open source inventory management system from SourceCodester. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

8.8CVSS6.5AI score0.00544EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/05/15 8:15 p.m.•19 views

CVE-2024-11267

The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor to perform SQL injection attacks...

8.8CVSS8.5AI score0.00586EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/05/15 7:15 p.m.•21 views

CVE-2025-4712

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/accountsummary.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7AI score0.00702EPSS
SaveExploits1References5
Rows per page
Query Builder