870 matches found
CVE-2025-4314
A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The...
WUZHI CMS 注入漏洞
WUZHI CMS is a set of five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1 version of an injection vulnerability, the vulnerability stems from improper operation of the parameter Setting in the file / index.php, which may lead to code injectio...
PT-2025-16175 · Unknown · Youdiancms
Name of the Vulnerable Software and Affected Versions: YouDianCMS version 9.5.21 Description: A vulnerability has been found in YouDianCMS, affecting an unknown part of the file /App/Tpl/Admin/Default/Log/index.html. The manipulation of the argument UserName/LogType leads to cross-site scripting...
GHSA-4VJR-HFPP-2M7W expand-object Vulnerable to Prototype Pollution via the expand() Function
Versions of the package expand-object from 0.0.0 to 0.4.2 are vulnerable to Prototype Pollution in the expand function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sensitive properties like proto...
CVE-2025-2660
A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. The attack can be initiated remotely. The exploit has been...
PHPGurukul Vehicle Record Management System 安全漏洞
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the searchinputdata parameter of index.php. An attacker can exploit this...
PT-2025-7700
Name of the Vulnerable Software and Affected Versions vTiger CRM version 6.4.0 Description A problematic issue has been identified, affecting the /modules/Mobile/index.php file. The manipulation of the operation argument leads to cross-site scripting. This issue can be exploited remotely...
Hoosk 安全漏洞
Hoosk is a lightweight content management system from the individual developers at Havok. A security vulnerability exists in Hoosk version 1.7.1, which stems from a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the /install/index.php component...
GHSA-8FC2-FHH6-F6M5 Easy!Appointments Improper Restriction of Excessive Authentication Attempts
An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...
CVE-2025-1213
A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...
Easy!Appointments 安全漏洞
Easy!Appointments is a web-based appointment, scheduling management system from the individual developer Alex Tselegidis. A security vulnerability exists in Easy!Appointments v1.5.0, which stems from a missing permission validation in index.php, resulting in elevated privileges...
PT-2025-6511 · Glpi · Glpi
Name of the Vulnerable Software and Affected Versions: GLPI versions up to 10.0.17 Description: A vulnerability was found in an unknown functionality of the file /index.php, where the manipulation of the redirect argument leads to open redirect. The attack can be launched remotely. Recommendation...
CVE-2025-1160
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...
CVE-2025-1160 SourceCodester Employee Management System index.php default credentials
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched...
The vulnerability of the index.php script in the YouDianCMS content management system allows attackers to escalate their privileges or cause service failures.
The vulnerability of the index.php script in the YouDianCMS content management system is related to the unlimited loading of dangerous data due to improper session management. Exploiting this vulnerability can allow a malicious actor to increase their privileges or cause service failures...
CVE-2024-6065
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The exploit has be...
TeamCal Neo SQL注入漏洞
TeamCal Neo is a calendar-based web application by George Lewe Personal Developer. A SQL injection vulnerability exists in TeamCal Neo version 3.8.2. An attacker can use this vulnerability to inject malicious SQL statements via the "abs" parameter in "/teamcal/src/index.php" to retrieve, update,...
CVE-2025-0847
A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...
PT-2025-4072 · Unknown · 1000 Projects Employee Task Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Employee Task Management System version 1.0 Description: A critical issue affects the Login component of the system, specifically the file /index.php. The manipulation of the email argument leads to sql injection. This issue can...