PHPGurukul Apartment Visitors Management System Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. The Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from a lack of validation of the contactno parameter against externally entered SQL statements. An attacker can use this...

PHPGurukul Emergency Ambulance Hiring Portal Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacke...

PHPGurukul Emergency Ambulance Hiring Portal Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the ambulanceregnum parameter of the file /admin/booking-details.php...

Nipah virus Testing Management System check_availability.php File SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the checkavailability.php file. An attacker can exploit...

Projectworlds Life Insurance Management System Injection Vulnerability

Projectworlds Life Insurance Management System is a life insurance management system from Projectworlds India. An injection vulnerability exists in Projectworlds Life Insurance Management System version 1.0, which stems from improper manipulation of the agentid parameter and can lead to SQL...

PHPGurukul Emergency Ambulance Hiring Portal Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the pagedes parameter of the /admin/about-us.php file. An attacker c...

CVE-2025-2046

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2025-2039

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...

E-commerce website injection vulnerabilities

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. An injection vulnerability exists in Ecommerce-Website version 1.0, which stems from an incorrect operation of the parameter proid that can lead to SQL injection...

CVE-2025-1966

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The...

CVE-2025-1963

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /reservation.php. The manipulation of the argument checkin leads to sql injection. The attack can be initiated remotely. The exploit has been...

WordPress plugin Hero Slider has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress Ultimate Member plugin <= 2.10.0 - Unauthenticated SQL Injection via search Parameter vulnerability

Unauthenticated SQL Injection via search Parameter vulnerability discovered by mikemyers in WordPress Plugin Ultimate Member versions = 2.10.0...

WordPress WooMail plugin <= 3.0.34 - Authenticated (Subscriber+) Missing Authorization to SQL Injection vulnerability

Authenticated Subscriber+ Missing Authorization to SQL Injection vulnerability discovered by Lucio Sá in WordPress Plugin WooMail versions = 3.0.34...

CVE-2025-1956

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-1903

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-1894

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

PHPGurukul Restaurant Table Booking System has a security vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter username/mobileno in the...

PHPGurukul Restaurant Table Booking System has a security vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that stems from an incorrect operation of the parameter mobilenumber in the /admin/profile.php file that can lead to SQL injection. No details of th...

Uniguest Tripleplay SQL Injection Vulnerability

Uniguest Tripleplay is a multimedia player from Uniguest. A SQL injection vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that stems from SQL injection...