CVE-2022-30449: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php...

CVE-2022-30448: Unrestricted Upload of File with Dangerous Type

Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php...

The vulnerability of the sapi_header_op function in the PHP programming language allows attackers to carry out XSS attacks.

The vulnerability of the sapiheaderop function in the PHP programming language is related to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows an attacker to perform XSS attacks remotely...

CVE-2021-46024: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...

CVE-2020-35270: Improper Neutralization of Special Elements used in an SQL Command

Student Result Management System In PHP With Source Code is affected by SQL injection. An attacker can able to access of Admin Panel and manage every account of Result...

CVE-2020-28687: Unrestricted Upload of File with Dangerous Type

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files...

CVE-2020-28688: Unrestricted Upload of File with Dangerous Type

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files...

CVE-2020-25271: Improper Neutralization of Input During Web Page Generation

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

SQL Injection Vulnerability in in***.php Page of Winda System Management Platform

Winda system management platform is a rapid station building and management platform developed by Guangxi Jixiang NetDa Information Technology Co. There is a SQL injection vulnerability in the in.php page of the Winda system management platform, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in in***.php of Longcai Technology Group Co.

Longcai Technology Group Limited Liability Company is a company dedicated to the development and construction of the Internet enterprise wisdom cloud service platform, and "Internet + industry innovation" platform services. Longcai Technology Group Limited Liability Company building system in.php...

LaySNS suffers from SQL injection vulnerability in in***.php file

LaySNS is a lightweight, integrated content management and community interaction website management system based on ThinkPHP+Layui architecture. LaySNS has a SQL injection vulnerability in the in.php file, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in In***.php file of MyuCMS open source content management system (CNVD-2020-18786)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system In.php file SQL injection vulnerability . Attackers can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Yunye CMS in***.php Page

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the CMS in.php page, which can be exploited by attackers to obtain sensitive information...

SQL injection vulnerability in in***.php file of Laikai e-commerce system (CNVD-2020-00181)

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system in.php file contains a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Tpshop v3.5 In***.php Page

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 In.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

Arbitrary file read vulnerability in zzzphp in***.php file

zzphp is a free website building system developed using PHP. An arbitrary file read vulnerability exists in the zzzphp in.php file. An attacker can exploit the vulnerability to read sensitive information...

PHPOK d***.in***.php file has an arbitrary file read vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. An arbitrary file read vulnerability exists in the PHPOK d.in.php file. An attacker can construct arbitrary file paths to obtain sensitive information by using a reverse-encoding method...

SQL Injection Vulnerability in 74cms in***.php Page

Knight Talent System 74cms is a talent recruitment system based on PHP+MYSQL. A SQL injection vulnerability exists in the 74cms in.php page, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in In***.php File of CloudYou CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A command execution vulnerability exists in the In.php file of the YUNUCMS enterprise website management system. An attacker can exploit...

SQL Injection Vulnerability in LaySNS In***.php File

LaySNS Light Community is a comprehensive website system based on ThinkPHP5+LayUI that integrates content publishing and community exchange. A SQL injection vulnerability exists in the LaySNS In.php file. An attacker can exploit the vulnerability to obtain sensitive database information...