118 matches found
EUVD-2025-31742
Malicious code in bioql PyPI...
EUVD-2021-28079
Malicious code in bioql PyPI...
CVE-2025-28016
A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...
CVE-2025-28016
The PHPGurukul User Registration & Login and User Management System version V3.3 is susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability in the loginsystem/edit-profile.php file. The root cause is the unverified input of the fname, lname, and contact parameters, which allows remote...
Employee Record Management System myprofile.php File Cross-Site Scripting Vulnerability
Employee Record Management System is an employee record management system. The Employee Record Management System suffers from a cross-site scripting vulnerability that arises from insufficient filtering of the First name parameter in the /myprofile.php file. An attacker can exploit this...
PHPGurukul Employee Record Management System Code Injection Vulnerability
Employee Record Management System is an employee record management system. The Employee Record Management System suffers from a cross-site scripting vulnerability that arises from insufficient filtering of the First name parameter in the /myprofile.php file. An attacker can exploit this...
PT-2025-35087
Name of the Vulnerable Software and Affected Versions PuneethReddyHC Online Shopping System Advanced version 1.0 Description A reflected Cross-Site Scripting XSS vulnerability exists in the register.php file. Unsanitized user input in the f name parameter is reflected in the server response witho...
CVE-2025-8811 code-projects Simple Art Gallery registration.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely...
Hospital Management System security vulnerabilities
Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which is caused by a cross-site scripting attack due to incorrect manipulation of the parameters fname and lname in the file...
CVE-2025-7605
A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been...
Code-Projects AVL Rooms security vulnerabilities
Code-Projects AVL Rooms is an AVL room system from Code-Projects open source. A security vulnerability exists in Code-Projects AVL Rooms version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter firstname in the file /profile.php...
PT-2025-29463 · Avl Rooms · Avl Rooms
Name of the Vulnerable Software and Affected Versions: AVL Rooms version 1.0 Description: A vulnerability exists in AVL Rooms that may allow for remote exploitation. The issue is related to SQL injection within the /profile.php file, specifically through manipulation of the first name parameter...
Itsourcecode Employee Management System injection vulnerability
itsourcecode Employee Management System is itsourcecode open source employee management system. An injection vulnerability exists in itsourcecode Employee Management System version 1.0, which stems from improper handling of the parameter FirstName in the file /admin/editempprofile.php, which can...
CVE-2023-1031
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the settings endpoint and firstname parameter...
Project Worlds Online Lawyer Management System Injection Vulnerability
Project Worlds Online Lawyer Management System is an online lawyer management system from Project Worlds, Inc. An injection vulnerability exists in Project Worlds Online Lawyer Management System version 1.0, which stems from an incorrect operation of the parameter firstName that can lead to SQL...
Code-Projects Payroll Management System security vulnerabilities
Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameters lname and fname that can lead to SQL injecti...
Serosoft Solutions Academia Student Information System EagleR Cross-site Scripting Vulnerability
Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from a stored cross-site scripting vulnerability in...
CVE-2025-27584: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update...
PT-2025-9245
Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Fir...