CVE-2025-1966

CVE-2025-1966 affects PHPGurukul Pre-School Enrollment System 1.0. The vulnerability is an SQL injection in the /admin/index.php file caused by manipulating the username parameter. It is exploitable remotely, and publicly disclosed exploits exist. No remediation or patch details are provided in t...

CVE-2025-1966 PHPGurukul Pre-School Enrollment System index.php sql injection

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Pre-School Enrollment System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to SQL injection...

Linux Distros Unpatched Vulnerability : CVE-2023-40661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or...

CVE-2024-33485

SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component...

DRUPAL-CONTRIB-2025-015

Open Social is a Drupal distribution for online communities, which ships with a default module to invite users to groups and events. Invites for a specific user can be seen under certain conditions. The issue is mitigated for events by the fact that social\event\max\enroll has to be enabled...

Astra Linux – Vulnerability in opensc

A heap-based buffer overflow vulnerability was discovered in the libopensc OpenPGP driver. A specially crafted USB device or smart card, containing malicious responses to APDUs during the card enrollment process using the pkcs15-init tool, may lead to unauthorized access, potentially resulting in...

CVE-2024-54790

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter...

CVE-2024-54790

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter...

PHPGurukul Pre-School Enrollment System Project 安全漏洞

PHPGurukul Pre-School Enrollment System Project is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Pre-School Enrollment System Project v1.0 that stems from vulnerability to SQL injection attacks and allows remote attackers to execute...

CVE-2024-54790

CVE-2024-54790 affects PHPGurukul Pre-School Enrollment System v1.0. The vulnerability is a SQL Injection in /index.php via the visittime parameter, enabling remote attackers to execute arbitrary code. The CVSS vector indicates network access with high impact to confidentiality, integrity, and av...

CVE-2024-54810

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...

PHPGurukul Pre-School Enrollment System Project 安全漏洞

PHPGurukul Pre-School Enrollment System Project is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Pre-School Enrollment System Project v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitra...

CVE-2024-54810

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...

CVE-2024-54810

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...

CVE-2024-51720

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication SCA Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number...

PT-2024-34867 · Secusuite · Secusuite

Name of the Vulnerable Software and Affected Versions: SecuSUITE versions 5.0.420 and earlier Description: The issue is related to an insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication SCA Server. This could allow an attacker to potentially enroll an...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49392

CVE-2024-49392 is an XSS vulnerability in Acronis Cyber Files for Windows prior to build 9.0.0x24, disclosed via PT-2024-33504 and corroborated by other sources. The issue occurs on the enrollment invitation page, allowing stored XSS through injected scripts. Affected product: Acronis Cyber Files...

PT-2024-33504 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions before 9.0.0x24 Description: A stored cross-site scripting XSS issue exists on the enrollment invitation page. This allows an attacker to inject malicious scripts into the page, potentially leading to...