Bookgy SQL注入漏洞

Bookgy is an online reservation management and booking system for all types of small and medium-sized businesses from Bookgy, Inc. Bookgy has an SQL injection vulnerability that originates from SQL injection of the IDTIPO, IDPISTA, and IDSOCIO parameters in the /bkgseleccionarhoraajax.php file...

Code-Projects Patient Record Management System 安全漏洞

Code-Projects Patient Record Management System is an open source patient record management system from Code-Projects. A security vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter...

tournatrack 安全漏洞

tournatrack is a tracker by the individual developer Tito Sarrionandia. A security vulnerability exists in tournatrack that stems from an injection due to parameter ID manipulation in the file checkid.py...

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of adequate validation of inputs to the ID parameter in the file /editfpatient.php. No details of the vulnerability are...

CVE-2025-28100

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter...

PT-2025-15219

Name of the Vulnerable Software and Affected Versions code-projects Patient Record Management System version 1.0 Description A critical issue has been found in the code-projects Patient Record Management System. This issue affects an unknown part of the file /dental pending.php. The manipulation ...

CVE-2025-3119

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/managecourse.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...

SourceCodester AC Repair and Services System 注入漏洞

SourceCodester AC Repair and Services System is a SourceCodester open source air conditioning repair and services system. An injection vulnerability exists in SourceCodester AC Repair and Services System version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead...

SourceCodester Kortex Lite Advocate Office Management System 注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...

CVE-2024-11167

Affected software/version : danny-avila/librechat

Online Class and Exam Scheduling System room.php File Cross-Site Scripting Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id and rome of...

Online Class and Exam Scheduling System department.php file cross-site scripting vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id, code, and name ...

Sytel Softdial Contact Center（Sytel SCC） 路径遍历漏洞

Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A path traversal vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from a path traversal of the /softdial/scheduler/load.php endpoint id parameter, which could lead to unauthoriz...

CVE-2025-29431

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...

kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter

A flaw was foundin the Linux Kernel when specifying the srptserviceguid parameter, which may lead to kernel crash...

The vulnerability of LLM-powered system startups like AnythingLLM, related to shortcomings in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the LLM startup and management system, AnythingLLM, is related to deficiencies in the authentication process when processing the id parameter. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. Code-Projects Blood Bank Management System version 1.0 suffers from an injection vulnerability that stems from improper manipulation of the stateid parameter, which could lead to an SQL...

ChurchCRM EditEventAttendees Feature Blind SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a blind SQL injection vulnerability that stems from an EID parameter being directly connected to a SQL query without proper cleanup, which can be exploited by an attacker to execute arbitrary SQL queries using a...

dingfanzu 注入漏洞

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. An injection vulnerability exists in dingfanzu 20250210 and earlier versions, which is caused by a SQL injection in the parameter shopId...