Lucene search
+L

326 matches found

Kitploit
Kitploit
•added 2026/10/01 11:58 p.m.•13 views

CVE-2025-6860

CVE-2025-6860 Exploit Tool A proof‑of‑concept command‑line tool in C for detecting and rudimentary exploiting the SQL injection vulnerability CVE‑2025‑6860 in staffcommision.php parameters fromdate & todate. Leverages libcurl for HTTP requests, rotates through common payloads & user‑agents, scans...

8.8CVSS6.8AI score0.00451EPSS
SaveExploits2
EUVD
EUVD
•added 2026/09/15 12:31 a.m.•20 views

EUVD-2026-78223

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/15 12:17 a.m.•12 views

CVE-2026-90841

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-90841: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/14 11:30 p.m.•15 views

CVE-2026-90841 PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/14 11:30 p.m.•35 views

CVE-2026-90841 PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•31 views

PT-2026-91765

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/30 9:16 p.m.•19 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS0.00319EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/30 12:00 a.m.•20 views

EUVD-2025-210555

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

6AI score0.00319EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/30 12:00 a.m.•41 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/30 12:00 a.m.•12 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

5.8AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 12:00 a.m.•42 views

CVE-2025-69935

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the report.php and revenue_report.php files. The vulnerability is triggered via the fromDate parameter, allowing for the improper neutralization of special elements used in SQL commands. This issue can lead to un...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•25 views

PT-2026-66584

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'report.php' and 'revenue report.php' endpoints through the fromDate parameter. SQL Injection is a technique where malicious SQL statements are inserted...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/30 12:00 a.m.•4 views

CVE-2025-69935: Improper Neutralization of Special Elements used in an SQL Command

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/06 5:16 a.m.•35 views

CVE-2026-14796

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/06 4:15 a.m.•63 views

CVE-2026-14796

CVE-2026-14796 affects CodeAstro Apartment Visitor Management System 1.0. Affected component: /apartment-visitor/report.php; vulnerability: SQL injection triggered by manipulating the fromdate parameter. Attackable remotely over network with no user interaction; attacker privileges required: LOW....

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/06 4:15 a.m.•14 views

CVE-2026-14796

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/07/06 4:15 a.m.•28 views

EUVD-2026-41807

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.8AI score0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/06 4:15 a.m.•16 views

CVE-2026-14796 CodeAstro Apartment Visitor Management System report.php sql injection

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•1 views

CVE-2026-14796: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder