EUVD-2024-22829

Malicious code in bioql PyPI...

EUVD-2023-38603

Malicious code in bioql PyPI...

EUVD-2025-22586

Malicious code in bioql PyPI...

EUVD-2023-41648

Malicious code in bioql PyPI...

EUVD-2023-33808

Malicious code in bioql PyPI...

EUVD-2024-3591

Malicious code in bioql PyPI...

EUVD-2023-28658

Malicious code in bioql PyPI...

EUVD-2025-32008

Malicious code in bioql PyPI...

EUVD-2025-28819

Malicious code in bioql PyPI...

EUVD-2025-24932

Malicious code in bioql PyPI...

EUVD-2024-54996

Malicious code in bioql PyPI...

EUVD-2025-27103

Malicious code in bioql PyPI...

EUVD-2022-1582

Malicious code in bioql PyPI...

CVE-2025-40647

Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...

CVE-2025-40647

Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...

CVE-2025-40647

The CVE-2025-40647 entry concerns Issabel v5.0.0 with a stored XSS vulnerability in the web UI, caused by insufficient validation of user input in the email parameter of /index.php?menu=address_book. Public references describe a stored XSS that can be triggered via this parameter, with CVSS v4.0 ...

CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel products

Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...

PT-2025-40240

Name of the Vulnerable Software and Affected Versions Issabel version 5.0.0 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The issue is triggered through the email parameter in the '/index.php?menu=address book' API endpoint. This...

Small CRM SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter email in the file /forgot-password.php. An attacker can exploit this vulnerability to...

CVE-2025-11053

A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could b...