Mobile Shop LoginAsAdmin.php File SQL Injection Vulnerability

Mobile Shop is a mobile store. Mobile Shop suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /LoginAsAdmin.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

PT-2025-29472 · Code Projects · Mobile Shop

Name of the Vulnerable Software and Affected Versions: code-projects Mobile Shop version 1.0 Description: A critical issue exists in code-projects Mobile Shop 1.0, affecting unknown code within the /login.php file. The email parameter is susceptible to SQL injection, allowing for remote...

Code-Projects Mobile Shop 注入漏洞

Mobile Shop is a mobile store. Mobile Shop suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /login.php. The vulnerability can be exploited by an attacker to execute illegal SQL commands to...

PT-2025-29467 · Unknown · Simple Php Shopping Cart

Name of the Vulnerable Software and Affected Versions: Simple Shopping Cart version 1.0 Description: A critical issue exists in Simple Shopping Cart 1.0. The manipulation of the user email parameter in an unknown function of the file /userlogin.php leads to a SQL injection. The attack can be...

Code-Projects Simple Shopping Cart 注入漏洞

Code-Projects Simple Shopping Cart is Code-Projects open source a simple shopping cart system . An injection vulnerability exists in Code-Projects Simple Shopping Cart version 1.0, which originates from a SQL injection due to the incorrect operation of the parameter useremail in the file...

PHPGurukul Vehicle Parking Management System 注入漏洞

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter email in the file /users/forgot-password.php that lacks validation of externally entered SQL statements. An...

CVE-2025-34096 Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field,...

Code-Projects Mobile Shop 安全漏洞

Mobile Shop is a mobile store. Mobile Shop suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /LoginAsAdmin.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

CVE-2025-7171

A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functionality of the file /policelogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7168

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /userlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CampCodes Cyber Cafe Management System 注入漏洞

CampCodes Cyber Cafe Management System is a cyber cafe management system from CampCodes Philippines. An injection vulnerability exists in version 1.0 of the CampCodes Cyber Cafe Management System, which stems from a SQL injection due to a mishandling of the parameter email in the file...

Code-Projects Crime Reporting System 注入漏洞

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /userlogin.php. An attacker can exploit this vulnerability to...

Code-Projects Crime Reporting System 注入漏洞

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /headlogin.php. An attacker can exploit this vulnerability to...

Code-Projects Crime Reporting System 注入漏洞

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /policelogin.php. An attacker can exploit this vulnerability to...

CVE-2025-7120

A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/checkavailability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CampCodes Complaint Management System 注入漏洞

CampCodes Complaint Management System is a complaint management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Complaint Management System version 1.0, which stems from improper handling of the parameter email in the file /users/checkavailability.php, which coul...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the save process in the /system/users/save path when handling the name or email arguments. An attacker can inject arbitrary web script or HTML by submitting crafted input to these parameters. Details...

CVE-2024-11405

The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmpresetpasswordtoken parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress plugin WP Front-end login and register 跨站脚本漏洞

WP Front-end login and register is a WordPress front-end account management plugin, mainly used in the front-end of the site to achieve user registration, login and password change functions, without having to jump to the WordPress background. WordPress WP Front-end login and register has a...

Online Shoe Store contactus.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /contactus.php. An attacker can exploit this vulnerability to execute...