CVE-2025-11112

A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been...

Employee Record Management System myprofile.php File Cross-Site Scripting Vulnerability

Employee Record Management System is an employee record management system. The Employee Record Management System suffers from a cross-site scripting vulnerability that arises from insufficient filtering of the First name parameter in the /myprofile.php file. An attacker can exploit this...

CVE-2025-11112

A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-11112 PHPGurukul Employee Record Management System myprofile.php cross site scripting

A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-11112

PHPGurukul Employee Record Management System 1.3 has a cross-site scripting vulnerability in the /myprofile.php file, caused by manipulating the First name parameter. The attack is described as remote and the exploit has been publicly disclosed. CVSS v3.1 base score 6.1 (MEDIUM) per NVD; related ...

PHPGurukul Employee Record Management System 代码注入漏洞

Employee Record Management System is an employee record management system. The Employee Record Management System suffers from a cross-site scripting vulnerability that arises from insufficient filtering of the First name parameter in the /myprofile.php file. An attacker can exploit this...

CVE-2025-11112: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been...

PT-2025-39783

Name of the Vulnerable Software and Affected Versions PHPGurukul Employee Record Management System version 1.3 Description A security issue exists in PHPGurukul Employee Record Management System version 1.3. Manipulation of the First name argument in the /myprofile.php file can lead to cross site...

PT-2025-39084

Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A weakness exists in Campcodes Online Learning Management System. Manipulation of the firstname argument in the /admin/admin user.php file can lead to SQL injection. The attac...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the dataAdmindescription, dataAdminfname, and dataAdminlname parameters in the /apprain/admin/account/edit process. An attacker can execute arbitrary scripts in the context of a user's browser by submitting...

CVE-2025-9610

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...

PT-2025-35087

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Online Shopping System Advanced version 1.0 Description A reflected Cross-Site Scripting XSS vulnerability exists in the register.php file. Unsanitized user input in the f name parameter is reflected in the server response witho...

CVE-2025-51971

A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php file of PuneethReddyHC Online Shopping System Advanced version 1.0 . The root cause is the lack of proper HTML encoding or output escaping for unsanitized user input provided in the f_name parameter. This flaw allows ...

CVE-2025-8811 code-projects Simple Art Gallery registration.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely...

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which is caused by a cross-site scripting attack due to incorrect manipulation of the parameters fname and lname in the file...

CVE-2025-7605

A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2025-29463 · Avl Rooms · Avl Rooms

Name of the Vulnerable Software and Affected Versions: AVL Rooms version 1.0 Description: A vulnerability exists in AVL Rooms that may allow for remote exploitation. The issue is related to SQL injection within the /profile.php file, specifically through manipulation of the first name parameter...

Code-Projects AVL Rooms 安全漏洞

Code-Projects AVL Rooms is an AVL room system from Code-Projects open source. A security vulnerability exists in Code-Projects AVL Rooms version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter firstname in the file /profile.php...

CVE-2025-7153

A vulnerability classified as problematic was found in CodeAstro Simple Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor.html of the component POST Parameter Handler. The manipulation of the argument First Name/Last name/Address leads ...