SourceCodester Eye Clinic Management System 安全漏洞

SourceCodester Eye Clinic Management System is a SourceCodester open source eye clinic management system. A security vulnerability exists in SourceCodester Eye Clinic Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter Search in the fil...

PT-2025-35458

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A flaw exists in itsourcecode Sports Management System version 1.0, specifically within an unknown function of the file /Admin/resultdetails.php. Manipulation of the ID argument c...

PT-2025-35441

Name of the Vulnerable Software and Affected Versions: Campcodes/SourceCodester Courier Management System version 1.0 Description: A SQL injection issue exists in the Login function of the /ajax.php file. Manipulation of the email argument can lead to SQL injection. The issue is remotely...

PT-2025-35471

Name of the Vulnerable Software and Affected Versions: SourceCodester Eye Clinic Management System version 1.0 Description: A security issue exists in SourceCodester Eye Clinic Management System 1.0. The vulnerability is due to SQL injection in an unknown functionality within the /main/search ind...

CVE-2025-9751 Campcodes Online Learning Management System login.php sql injection

A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...

CVE-2025-9750 Campcodes Online Learning Management System login.php sql injection

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-9749 HKritesh009 Grocery List Management Web App update.php sql injection

A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-9744

A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made...

CVE-2025-9744

CVE-2025-9744 affects Campcodes Online Loan Management System 1.0. A SQL injection vulnerability exists in the /ajax.php?action=login endpoint triggered by manipulating the Username parameter, enabling remote exploitation and potentially unauthorized access or data modification. Public exploits a...

CVE-2025-9741

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /loginquery12.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2025-9667

A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /deleteaccount.php of the component Admin Panel. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public a...

CVE-2025-9742 code-projects Human Resource Integrated System login.php sql injection

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2025-9730

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9729

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-9644

A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/billsetup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-9729 PHPGurukul Online Course Registration student-registration.php sql injection

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-9607

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/TabelaArredondamento/view of the component Tabelas de Arredondamento Page. Executing manipulation of the argument ID can lead to sql injection. The attack may be...

CVE-2025-9610

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2025-9600

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/membertypesetup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. T...

CVE-2025-9593

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...