CVE-2025-3256: Improper Access Control

A vulnerability was found in xujiangfei admintwo 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/updateSet. The manipulation of the argument email leads to improper access controls. The attack may be launched remotely. The exploit has bee...

PT-2025-10017

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System version 3.3 Description A critical vulnerability was found in the PHPGurukul User Registration & Login and User Management System. The issue affects an unknown functionality of th...

CVE-2025-1596: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Church Management Software 1.0 and classified as critical. This issue affects some unknown processing of the file /fpassword.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-0846: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-12883

CVE-2024-12883 affects code-projects Job Recruitment 1.0. The vulnerability is in the file /_email.php where manipulation of the email parameter leads to cross-site scripting. Attacks can be launched remotely, and public disclosures exist. The available documents consistently indicate an XSS risk...

CVE-2024-12883: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /email.php. The manipulation of the argument email leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-12791: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips E-Commerce Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file signin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2024-12231: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-11257: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11099: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2024-11077

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

CVE-2024-7449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7311: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the argument Email leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2024-37576 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailoring Management System version 1.0 Description: A critical issue was found in the Tailoring Management System, affecting the file customeradd.php. The manipulation of the fullname, address, phonenumber, sex, email, city, and comment...

CVE-2024-6113: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-6111

The CVE-2024-6111 entry describes a SQL injection in Bethesda Online Reservation System (itsourcecode Pool of Bethesda Online Reservation System) version 1.0, affecting an unknown portion of login.php. The root cause is manipulation of the email parameter, enabling remote exploitation with disclo...

PT-2024-37389 · Bethesda · Bethesda Online Reservation System

Name of the Vulnerable Software and Affected Versions: Bethesda Online Reservation System version 1.0 Description: A critical vulnerability was found in the Bethesda Online Reservation System, affecting the file index.php. The manipulation of the log email argument leads to SQL injection. The...

CVE-2024-6129: Observable Behavioral Discrepancy

A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Username Handler. The manipulation of the argument email leads to observable behavioral discrepancy. It is possible to launch the attack...

CVE-2024-6111: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-6056: Observable Response Discrepancy

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...