Lucene search
K

39 matches found

CNVD
CNVD
added 2025/11/20 12:0 a.m.1 views

Complaint Management System between-date-userreport.php file SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the fromdate and todate parameters in between-date-userreport.php. An attacker can...

6.5CVSS8.3AI score0.00037EPSS
Exploits1References1
NVD
NVD
added 2025/11/17 6:15 p.m.2 views

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

6.5CVSS0.00037EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.1 views

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

7.6AI score0.00037EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/07 10:27 a.m.5 views

CVE-2025-11330

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit ha...

8.8CVSS6.4AI score0.00053EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 6:31 a.m.4 views

EUVD-2025-32609

A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate results in sql injection. The attack may be launched remotely. Th...

7.5CVSS6.5AI score0.00043EPSS
Exploits1References7
OSV
OSV
added 2025/10/07 4:16 a.m.1 views

CVE-2025-11350

A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate results in sql injection. The attack may be launched remotely. Th...

9.8CVSS5.8AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/07 4:2 a.m.4 views

CVE-2025-11350 Campcodes Online Apartment Visitor Management System bwdates-reports-details.php sql injection

A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate results in sql injection. The attack may be launched remotely. Th...

7.5CVSS7.2AI score0.00043EPSS
Exploits1References5
OSV
OSV
added 2025/10/06 10:15 a.m.2 views

CVE-2025-11330

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit ha...

8.8CVSS5.8AI score
Exploits0References7
EUVD
EUVD
added 2025/10/06 9:32 a.m.4 views

EUVD-2025-32524

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit ha...

6.5CVSS6.6AI score0.00053EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30806

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00044EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-54997

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.0014EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 4:34 p.m.3 views

CVE-2025-10806

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS6.5AI score0.00044EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/09/23 12:32 a.m.3 views

CVE-2025-10826 Campcodes Online Beauty Parlor Management System sales-reports-detail.php sql injection

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launche...

6.5CVSS6.7AI score0.00044EPSS
Exploits1References5
CVE
CVE
added 2025/09/23 12:32 a.m.13 views

CVE-2025-10826

CVE-2025-10826 affects Campcodes Online Beauty Parlor Management System v1.0. The vulnerability resides in /admin/sales-reports-detail.php where manipulating the fromdate/todate parameters enables SQL injection. The issue is exploitable remotely and public exploits exist. Connected sources corrob...

8.8CVSS6.5AI score0.00044EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/09/22 5:16 p.m.3 views

CVE-2025-10806

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS0.00044EPSS
Exploits1References5
OSV
OSV
added 2025/09/22 5:16 p.m.1 views

CVE-2025-10806

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS5.8AI score0.00044EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/22 4:32 p.m.2 views

CVE-2025-10806 Campcodes Online Beauty Parlor Management System bwdates-reports-details.php sql injection

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploi...

6.5CVSS6.5AI score0.00044EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.3 views

PT-2025-38746

Name of the Vulnerable Software and Affected Versions Campcodes Online Beauty Parlor Management System version 1.0 Description A security issue exists in Campcodes Online Beauty Parlor Management System 1.0. The issue involves potential SQL injection due to manipulation of the fromdate/todate...

8.8CVSS6.4AI score0.00044EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/09/11 11:40 a.m.2 views

CVE-2025-40694 Cross Site Scripting in PHPGurukul Online Fire Reporting System

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fromdate' and 'todate' parameters via POST at the endpoint '/ofrs/admin/bwdates-report-result.php'. This vulnerability...

5.1CVSS5.1AI score0.00048EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.2 views

PT-2025-37178

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a stored cross-site scripting XSS issue. This is due to insufficient validation of user-supplied fromdate and todate parameters via a POST request...

5.4CVSS5.7AI score0.00048EPSS
Exploits0References3
Rows per page
Query Builder