Lucene search
+L

451 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•5 views

CVE-2025-3213: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /view-note.php?noteid=11. The manipulation of the argument remark leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•6 views

CVE-2025-3188: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unknown part of the file /add-notes.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.9AI score0.00562EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•4 views

CVE-2025-3187: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•16 views

PHPGurukul e-Diary Management System 注入漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Category of the dashboard.php file. An attacker can...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•5 views

CVE-2025-3242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-result.php. The manipulation of the argument id/searchdata leads to sql injection. The attack can be initiated remotely. The exploit h...

9.8CVSS6.4AI score0.005EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•21 views

PHPGurukul e-Diary Management System 注入漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the search-result.php file. An attacker ca...

9.8CVSS6.9AI score0.005EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•27 views

PT-2025-14882 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue has been discovered, affecting the file /search-result.php. The manipulation of the searchdata argument leads to SQL injection. This issue can be exploited remotel...

9.8CVSS7.1AI score0.005EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/04/02 6:42 p.m.•29 views

CVE-2025-3006

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-category.php?id=8. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/31 6:15 p.m.•29 views

CVE-2025-3006

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-category.php?id=8. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS0.00562EPSS
SaveExploits1References5
CVE
CVE
•added 2025/03/31 6:00 p.m.•75 views

CVE-2025-3006

CVE-2025-3006 affects PHPGurukul e-Diary Management System 1.0. The vulnerability is a SQL injection in the file /edit-category.php?id=8, caused by unvalidated input in the Category parameter. Exploitation can be performed remotely and, per connected sources, the exploit has been disclosed public...

9.8CVSS7.6AI score0.00562EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/03/31 6:00 p.m.•46 views

CVE-2025-3006 PHPGurukul e-Diary Management System edit-category.php sql injection

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-category.php?id=8. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit...

7.5CVSS0.00562EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/03/31 6:00 p.m.•17 views

CVE-2025-3006 PHPGurukul e-Diary Management System edit-category.php sql injection

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-category.php?id=8. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit...

7.5CVSS7.5AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•13 views

PHPGurukul e-Diary Management System 安全漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the Category parameter of the edit-category.php?id=8 file. An attacker ca...

9.8CVSS8.2AI score0.00562EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•4 views

PT-2025-13814

Name of the Vulnerable Software and Affected Versions PHPGurukul e-Diary Management System version 1.0 Description A critical issue has been identified, affecting the file "/edit-category.php" where the manipulation of the Category argument leads to SQL injection. This issue can be exploited...

9.8CVSS0.00562EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•6 views

CVE-2025-3006: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-category.php?id=8. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•2 views

CVE-2023-36510: Missing Authorization

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through 23.0211...

7.3CVSS5.9AI score0.00518EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/08 6:15 p.m.•16 views

CVE-2024-40239

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

6.8CVSS5.8AI score0.00258EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•17 views

Hitbytes Life : Personal Diary, Journal 安全漏洞

Hitbytes Life : Personal Diary, Journal is a diary application from Hitbytes India. A security vulnerability exists in Hitbytes Life : Personal Diary, Journal version 17.5.0, which stems from improper access control and allows a physically proximate attacker to elevate privileges via the...

6.8CVSS7AI score0.00258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/08 12:00 a.m.•14 views

PT-2024-28799 · Unknown · Life: Personal Diary

Name of the Vulnerable Software and Affected Versions: Life: Personal Diary, Journal android app version 17.5.0 Description: An issue with access control in the Life: Personal Diary, Journal android app allows a physically proximate attacker to escalate privileges via the fingerprint authenticati...

6.8CVSS7.3AI score0.00258EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•1 views

CVE-2024-40239: Undefined Security Weakness

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

6.8CVSS5.8AI score0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder