CVE-2024-44651

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

PT-2025-47188

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The PHPGurukul Complaint Management System version 2.0 contains a SQL Injection flaw. The issue is located in the reset-password.php file and affects the email and mobileno...

EUVD-2024-55091

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

CVE-2024-44659

The PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection (CWE-89) due to a lack of validation for externally entered SQL statements in the email parameter of the forgot-password.php script. Successful exploitation allows an attacker to execute arbitrary SQL code, which could lead ...

CVE-2024-44659: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php...

PT-2025-47187

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The software is susceptible to a SQL Injection issue through the user email parameter in the user login.php file. This allows for potential unauthorized access or manipulation of data. The...

PT-2025-47177

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The Kashipara Ecommerce Website is susceptible to a SQL Injection issue through the recover email parameter in the user password recover.php file. This allows for potential unauthorized acces...

PHPGurukul Complaint Management System security vulnerabilities

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the email and mobileno parameters of reset-password.php. An attacker can exploit this...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

EUVD-2024-55092

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

CVE-2024-44651

The Kashipara Ecommerce Website 1.0 is vulnerable to a SQL Injection flaw caused by the use of an unvalidated recover_email parameter in the user_password_recover.php file. This security weakness allows for potential unauthorized access to the database . To remediate this vulnerability, it is rec...

CVE-2024-44654

PHPGurukul Complaint Management System version 2.0 is vulnerable to an SQL Injection flaw within the reset-password.php file. The vulnerability arises from a lack of validation of externally entered SQL statements in the email and mobileno parameters. An attacker can exploit this by manipulating ...

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

EUVD-2024-55095

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

PT-2025-47202

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection due to improper handling of the email parameter in the forgot-password.php script. Successful exploitation allo...

CVE-2024-44653

The Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection (CWE-89) due to an unvalidated user_email parameter within the user_login.php file. This flaw allows for potential unauthorized access or manipulation of data. To remediate this vulnerability, it is recommended to apply appropriat...

CVE-2025-13235

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly...

ITSsourcecode Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...

CVE-2024-44630

Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...