Lucene search
+L

241 matches found

CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from a lack of validation of the fromdate parameter in the file foreigner-bwdates-reports-details.php against an externally entered SQL...

9.8CVSS8.5AI score0.00445EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/09/13 12:23 p.m.19 views

CVE-2025-40694

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fromdate' and 'todate' parameters via POST at the endpoint '/ofrs/admin/bwdates-report-result.php'. This vulnerability...

5.4CVSS5.5AI score0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/11 11:40 a.m.5 views

CVE-2025-40694 Cross Site Scripting in PHPGurukul Online Fire Reporting System

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fromdate' and 'todate' parameters via POST at the endpoint '/ofrs/admin/bwdates-report-result.php'. This vulnerability...

5.1CVSS5.1AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/11 12:00 a.m.11 views

PT-2025-37178

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a stored cross-site scripting XSS issue. This is due to insufficient validation of user-supplied fromdate and todate parameters via a POST request...

5.4CVSS5.7AI score0.00207EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.7 views

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in Online Fire Reporting System version 1.2, which stems from insufficient validation of the input of the parameters fromdate and todate...

5.4CVSS5.8AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/05 4:31 p.m.18 views

CVE-2025-9919

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS7.5AI score0.00444EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/03 4:15 p.m.18 views

CVE-2025-9919

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS7AI score0.00444EPSS
SaveExploits1References4
CVE
CVE
added 2025/09/03 4:02 p.m.26 views

CVE-2025-9919

CVE-2025-9919 affects 1000projects Beauty Parlour Management System 1.0. The vulnerability is in the /admin/bwdates-reports-details.php script, where manipulating the fromdate/todate parameters leads to SQL injection. Exploitation can be performed remotely and public exploit code exists. Multiple...

9.8CVSS7.2AI score0.00444EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/16 11:15 p.m.24 views

CVE-2025-8988

A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/14 11:15 p.m.19 views

CVE-2025-8988

A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00421EPSS
SaveExploits1References5
OSV
OSV
added 2025/08/14 11:15 p.m.8 views

CVE-2025-8988

A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/14 11:02 p.m.30 views

CVE-2025-8988

SourceCodester COVID 19 Testing Management System 1.0 contains a SQL injection in /bwdates-report-result.php via the fromdate parameter. The vulnerability is exploitable remotely with exploits publicly disclosed. Affected component is unknown elsewhere in the code; no patch/fix details are provid...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/14 11:02 p.m.29 views

CVE-2025-8988 SourceCodester COVID 19 Testing Management System bwdates-report-result.php sql injection

A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/14 11:02 p.m.10 views

CVE-2025-8988 SourceCodester COVID 19 Testing Management System bwdates-report-result.php sql injection

A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7.8AI score0.00421EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.17 views

PT-2025-33420 · Sourcecodester · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester COVID 19 Testing Management System version 1.0 Description: A vulnerability exists in SourceCodester COVID 19 Testing Management System 1.0, affecting unknown code within the /bwdates-report-result.php file. Manipulation of the...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.13 views

SourceCodester COVID 19 Testing Management System 注入漏洞

SourceCodester COVID 19 Testing Management System is a SourceCodester open source web-based application that provides an online platform for personal and Covid test management to manage individual testing processes and results. An injection vulnerability exists in version 1.0 of the SourceCodeste...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References7
OSV
OSV
added 2025/07/25 6:15 a.m.9 views

CVE-2025-8134

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...

8.8CVSS5.8AI score0.00436EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/07/21 12:00 a.m.63 views

Online Fire Reporting System bwdates-report-result.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /admin/bwdates-report-result.php for externally entered SQL statements...

8.8CVSS7.1AI score0.00325EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.9 views

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /admin/bwdates-report-result.php for externally entered SQL statements...

8.8CVSS7AI score0.00325EPSS
SaveExploits1References5
OSV
OSV
added 2025/07/13 7:15 a.m.10 views

CVE-2025-7522

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits1References5
Rows per page
Query Builder