Lucene search
+L

163 matches found

CNVD
CNVD
added 2025/05/20 12:00 a.m.9 views

e-Diary Management System /my-profile.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. An SQL injection vulnerability exists in e-Diary Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /my-profile.php. An attacker can explo...

9.8CVSS8.3AI score0.00507EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/16 8:15 a.m.11 views

CVE-2025-4758

A vulnerability classified as critical has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected is an unknown function of the file /contact.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00514EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/05/16 12:00 a.m.10 views

PHPGurukul Beauty Parlour Management System 注入漏洞

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally-entered SQL statement in...

9.8CVSS8.1AI score0.00514EPSS
SaveExploits1References6
OSV
OSV
added 2025/05/10 5:15 p.m.14 views

CVE-2025-4508

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/05/10 12:00 a.m.9 views

PHPGurukul e-Diary Management System 注入漏洞

The e-Diary Management System is an electronic diary management system. An SQL injection vulnerability exists in e-Diary Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /my-profile.php. An attacker can explo...

9.8CVSS8.2AI score0.00507EPSS
SaveExploits1References6
OSV
OSV
added 2025/05/09 4:16 a.m.13 views

CVE-2025-4456

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

9.8CVSS5.8AI score0.00917EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.9 views

Projectworlds Car Rental Project 注入漏洞

Projectworlds Car Rental Project is a car rental project by Projectworlds India. An injection vulnerability exists in Projectworlds Car Rental Project version 1.0, which stems from the mishandling of the fname parameter in the /signup.php file, which could lead to an SQL injection attack...

9.8CVSS7.8AI score0.00917EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/28 12:00 a.m.12 views

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul. A security vulnerability exists in PHPGurukul Old Age Home Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter fname in the file /contact.php...

9.8CVSS7.7AI score0.00535EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/29 12:00 a.m.15 views

Code-Projects Hostel Management System 代码注入漏洞

Code-Projects Hostel Management System is an open source hostel management system from Code-Projects. A code injection vulnerability exists in Code-Projects Hostel Management System version 1.0, which originates from a cross-site scripting vulnerability in the fname/mname/lname parameter of the...

6.1CVSS4.8AI score0.00526EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/23 2:15 p.m.11 views

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

9.8CVSS5.7AI score0.00807EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/23 12:00 a.m.15 views

PT-2024-17147 · Unknown · Code-Projects Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Car Rental System version 1.0 Description: A critical issue has been found in the code-projects Simple Car Rental System. The problem is related to an unknown function of the file /book car.php, where the manipulation of...

9.8CVSS7.8AI score0.00807EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/11/23 12:00 a.m.13 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...

9.8CVSS7.9AI score0.00807EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/11 3:15 p.m.10 views

CVE-2024-50991

A Cross Site Scripting XSS vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the "fname" POST request parameter...

4.8CVSS6.1AI score0.00399EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.13 views

PT-2024-34489 · Unknown · Phpgurukul User Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Management System version 1.0 Description: A Cross Site Scripting XSS issue was found in the "/ums-sp/admin/registered-users.php" endpoint, allowing remote attackers to execute arbitrary code via the fname POST request...

4.8CVSS6.9AI score0.00399EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/02 6:15 p.m.12 views

CVE-2024-10702

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00614EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/02 12:00 a.m.12 views

Code-Projects Simple Car Rental System SQL注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00614EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/02 12:00 a.m.19 views

PT-2024-16477 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A critical issue has been found in the Simple Car Rental System, affecting an unknown function of the file /signup.php. The manipulation of the fname argument leads to SQL injection. It is...

9.8CVSS8.2AI score0.00614EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2024/08/27 12:00 a.m.6 views

SourceCodester E-Commerce Website SQL注入漏洞

SourceCodester E-Commerce Website is a SourceCodester open source application. A PHP e-commerce website project for bookstores. A SQL injection vulnerability exists in SourceCodester E-Commerce Website version 1.0, which stems from the manipulation of the parameter fname in the file...

9.8CVSS7.9AI score0.00739EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/27 12:00 a.m.11 views

PT-2024-38876 · Sourcecodester · Sourcecodester E-Commerce Website

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce Website version 1.0 Description: A critical issue has been identified in the /Admin/registration.php file, where the manipulation of the fname argument leads to SQL injection. This issue can be initiated remotely. Th...

9.8CVSS7.7AI score0.00739EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.9 views

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH billing system project contains an administrator side. This PH Billing System project includes an administrator side where the...

9.8CVSS7.9AI score0.00582EPSS
SaveExploits1References5
Rows per page
Query Builder