CVE-2025-10077

CVE-2025-10077 affects SourceCodester Online Polling System 1.0; vulnerable in /registeracc.php via manipulations of the email parameter, enabling SQL injection. Exploitation may be remote and has been publicly disclosed. Remediation guidance in related PTSecurity advisory suggests restricting ac...

CVE-2025-10076 SourceCodester Online Polling System manage-profile.php sql injection

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...

CVE-2025-10076

CVE-2025-10076 affects SourceCodester Online Polling System 1.0. The vulnerability exists in the /manage-profile.php file where manipulation of the email parameter enables SQL injection. The issue can be exploited remotely and the exploit has circulated publicly. Impact is described as confidenti...

PT-2025-36425

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A security issue exists in SourceCodester Online Polling System 1.0. Manipulation of the email argument in the /registeracc.php file may lead to SQL injection. The attack can be...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.10 and earlier, which stems from cross-site scripting due to incorrect manipulation of the parameters email/datainicial/dataexpiracao...

PT-2025-36430

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A SQL injection issue exists due to manipulation of the email parameter in a file located at /admin/manage-admins.php. The vulnerability is present in an unknown function within th...

PT-2025-36487

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A weakness exists in Portabilis i-Educar up to version 2.10 related to cross site scripting. The issue is located in an unknown functionality of the file /intranet/educar usuario cad.php...

CVE-2025-9774

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for the fullname, email, and contactno parameters in user/registration.php. An...

CVE-2025-57147

CVE-2025-57147 affects the phpgurukul Complaint Management System 2.0. The vulnerability is in the user/registration.php flow where input validation is missing for multiple parameters (fullname, email, contactno), enabling a SQL Injection . The sourced details indicate a high impact on confidenti...

CVE-2025-9774

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-9774

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-9774 RemoteClinic edit-patient.php information disclosure

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-9774 RemoteClinic edit-patient.php information disclosure

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-9774

CVE-2025-9774 affects RemoteClinic up to version 2.0. The vulnerability stems from how the application processes the file /patients/edit-patient.php, where manipulation of the Email argument can lead to information disclosure. The issue can be triggered remotely and the exploit has been disclosed...

CVE-2025-9757

A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2025-9757 Campcodes/SourceCodester Courier Management System ajax.php login sql injection

A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2025-9757

CVE-2025-9757 affects Campcodes/SourceCodester Courier Management System v1.0. The vulnerability is a SQL injection in the /ajax.php Login function caused by manipulating the email parameter. It is remotely exploitable and reportedly disclosed publicly. Connected sources corroborate the issue and...

CVE-2025-9757 Campcodes/SourceCodester Courier Management System ajax.php login sql injection

A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

PT-2025-35474

Name of the Vulnerable Software and Affected Versions: RemoteClinic versions up to 2.0 Description: A vulnerability exists in RemoteClinic that affects the processing of the file /patients/edit-patient.php. Manipulation of the Email argument leads to information disclosure. The attack can be...