CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...

PT-2025-47164

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 is susceptible to SQL Injection through the id and adminremark parameters in the 'quote-details.php' file. This allows for potential unauthorized database access or...

Code-Projects Simple Food Ordering System SQL注入漏洞

Code-Projects Simple Food Ordering System is a Code-Projects open source simple food ordering system. A SQL injection vulnerability exists in code-projects Simple Food Ordering System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /saveorder.php, which could...

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from an incorrect manipulation of the parameter ID in the file /admin/user/index.php?view=edit, which...

CVE-2024-44648

CVE-2024-44648 affects PHPGurukul Small CRM 3.0. The vulnerability is a SQL Injection in the file quote-details.php , via the parameters id and adminremark . The root cause is lack of validation/ sanitization of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL aga...

PT-2025-47140

Name of the Vulnerable Software and Affected Versions Nero Social Networking Site version 1.0 Description A flaw exists in the processing of the /friendsphoto.php file within the software. Manipulation of the ID argument can lead to a SQL injection. This issue can be exploited remotely. The explo...

CampCodes School Fees Payment Management System SQL注入漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /managecourse.php. An...

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /manufacturer/confirmorder.php, which could...

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...

Code-Projects Nero Social Networking Site SQL注入漏洞

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID in the file /profilefriends.php. An attacker can exploit this vulnerability...

Code-Projects Nero Social Networking Site SQL注入漏洞

Nero Social Networking Site is a social networking site. Nero Social Networking Site suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /friendsphoto.php. An attacker can exploit this vulnerability t...

CVE-2025-13236 itsourcecode Inventory Management System index.php sql injection

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

EUVD-2025-197713

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

PT-2025-47070

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A flaw exists in itsourcecode Inventory Management System 1.0 that allows for remote SQL injection. The issue is located in the file /admin/products/index.php?view=edit,...

CVE-2024-55016

PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php...

FantasticLBP Hotels Server SQL注入漏洞

FantasticLBP Hotels Server is a backend management system for hotel reservation system. FantasticLBP Hotels Server has a SQL injection vulnerability, the vulnerability stems from the incorrect operation of the parameter subjectId/cityName in the file controller/api/hotelList.php, which may lead t...

CVE-2025-63725

Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...