PHPGurukul Zoo Management System 注入漏洞

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the parameter Username in /admin/login.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...

Projectworlds Apartment Visitors Management System 注入漏洞

Projectworlds Apartment Visitors Management System is an apartment visitor management system from Projectworlds India. An injection vulnerability exists in Projectworlds Apartment Visitors Management System version 1.0, which stems from an incorrect manipulation of the parameter rid that can lead...

PHPGurukul Online Security Guards Hiring System 注入漏洞

PHPGurukul Online Security Guards Hiring System is an online security guard hiring system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Online Security Guards Hiring System, which stems from the fact that incorrect manipulation of the parameter searchdata can...

Codezips Hospital Management System 注入漏洞

Codezips Hospital Management System is an open source hospital management system from Codezips. An injection vulnerability exists in Codezips Hospital Management System version 1.0, which stems from an incorrect manipulation of a parameter ID that can lead to SQL injection...

PHPGurukul Art Gallery Management System 注入漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the viewid parameter of /admin/view-enquiry-detail.php against an externally entered SQL statement. An attacke...

CVE-2025-2626

A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This vulnerability affects unknown code of the file editcase.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-2624

A vulnerability was found in westboy CicadasCMS 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/cms/content/save. The manipulation of the argument content/fujian/laiyuan leads to sql injection. The attack may be launched remotely. The...

SourceCodester Kortex Lite Advocate Office Management System 注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from an incorrect manipulation of a parameter ID that c...

WordPress ProfileGrid plugin <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Ivan Kuzymchak in WordPress Plugin ProfileGrid versions = 5.9.4.7...

PHPGurukul Banquet Booking System 注入漏洞

PHPGurukul Banquet Booking System is a banquet booking system from PHPGurukul. An injection vulnerability exists in version 1.2 of the PHPGurukul Banquet Booking System, which stems from improper manipulation of the viewid parameter in the /admin/view-user-queries.php file, which could lead to an...

CVE-2025-29980

A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrary commands as the current MS SQL server account. It is recommended that the CRM feature is turned off while on eTRAKiT.net release 3.2.1.7...

CM Informatics CM News SQL注入漏洞

CM Informatics CM News is a news site from CM Informatics, Inc. A SQL injection vulnerability exists in CM Informatics CM News version 6.0 and earlier, which stems from improper neutralization of special elements in SQL commands and could lead to a SQL injection attack...

Exploit for CVE-2025-22954

Koha CVE-2025-22954: SQL Injection in lateissues-export.pl...

Curfew e-Pass Management System /admin/search-pass.php File SQL Injection Vulnerability

Curfew e-Pass Management System is an electronic pass management system. The Curfew e-Pass Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /admin/search-pass.php file parameter searchdata. An...

Xinhu RockOA 安全漏洞

Xinhu RockOA is an office OA system of China Xinhu Xinhu Company. A security vulnerability exists in Xinhu RockOA 2.6.5 and earlier versions, which originates from the inputAction.php file and the saveAjax function that allows SQL injection, which may result in the execution of arbitrary code...

GLPI SQL注入漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

yimioa 安全漏洞

yimioa CloudNet OA is a locally deployed OA software by rabbit individual developers. A security vulnerability exists in yimioa versions prior to v2024.07.04, which stems from an SQL injection in the listNameBySql method...

yimioa 安全漏洞

yimioa CloudNet OA is a locally deployed OA software by rabbit personal developer. A security vulnerability exists in yimioa versions prior to v2024.07.04, which stems from an SQL injection in the selectNoticeList method...

CVE-2025-2381

A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploi...

Code-Projects Real Estate Property Management System 安全漏洞

Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. The vulnerability stems from an incorrect operation of the parameters txtName/txtAddress/cmbCity/txtEmail/cmbGender/txtBirthDate/txtUserName2/txtPassword2, which can...