160 matches found
CVE-2025-4508
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
PHPGurukul e-Diary Management System 注入漏洞
The e-Diary Management System is an electronic diary management system. An SQL injection vulnerability exists in e-Diary Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /my-profile.php. An attacker can explo...
CVE-2025-4456
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...
Projectworlds Car Rental Project 注入漏洞
Projectworlds Car Rental Project is a car rental project by Projectworlds India. An injection vulnerability exists in Projectworlds Car Rental Project version 1.0, which stems from the mishandling of the fname parameter in the /signup.php file, which could lead to an SQL injection attack...
PHPGurukul Old Age Home Management System 安全漏洞
PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul. A security vulnerability exists in PHPGurukul Old Age Home Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter fname in the file /contact.php...
Code-Projects Hostel Management System 代码注入漏洞
Code-Projects Hostel Management System is an open source hostel management system from Code-Projects. A code injection vulnerability exists in Code-Projects Hostel Management System version 1.0, which originates from a cross-site scripting vulnerability in the fname/mname/lname parameter of the...
CVE-2024-11632
A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...
Code-Projects Simple Car Rental System 注入漏洞
Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...
PT-2024-17147 · Unknown · Code-Projects Simple Car Rental System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Car Rental System version 1.0 Description: A critical issue has been found in the code-projects Simple Car Rental System. The problem is related to an unknown function of the file /book car.php, where the manipulation of...
CVE-2024-50991
A Cross Site Scripting XSS vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the "fname" POST request parameter...
PT-2024-34489 · Unknown · Phpgurukul User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Management System version 1.0 Description: A Cross Site Scripting XSS issue was found in the "/ums-sp/admin/registered-users.php" endpoint, allowing remote attackers to execute arbitrary code via the fname POST request...
CVE-2024-10702
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...
Code-Projects Simple Car Rental System SQL注入漏洞
Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...
PT-2024-16477 · Unknown · Simple Car Rental System
Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A critical issue has been found in the Simple Car Rental System, affecting an unknown function of the file /signup.php. The manipulation of the fname argument leads to SQL injection. It is...
PT-2024-38876 · Sourcecodester · Sourcecodester E-Commerce Website
Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce Website version 1.0 Description: A critical issue has been identified in the /Admin/registration.php file, where the manipulation of the fname argument leads to SQL injection. This issue can be initiated remotely. Th...
SourceCodester E-Commerce Website SQL注入漏洞
SourceCodester E-Commerce Website is a SourceCodester open source application. A PHP e-commerce website project for bookstores. A SQL injection vulnerability exists in SourceCodester E-Commerce Website version 1.0, which stems from the manipulation of the parameter fname in the file...
itsourcecode Billing System SQL注入漏洞
itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH billing system project contains an administrator side. This PH Billing System project includes an administrator side where the...
CVE-2023-0710
The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'fname' attribute of the 'mfthankyou' shortcode to echo unescaped form submissions in versions up to, and including, 3.3.0. This allows authenticated attackers, with contributor-level...
atoms183 CMS SQL Injection Vulnerability
atoms183 CMS is a content management system by the individual developer of Дмитрий Глазвин. A SQL injection vulnerability exists in atoms183 CMS version 1.0, which can be exploited by an attacker to execute arbitrary commands on search.php via the Name, Fname, and ID parameters...
