CVE-2024-57154

Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication via sending a crafted payload to /admin/auth/index...

CVE-2025-8772

A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack may ...

CVE-2025-8815 猫宁i Morning Shiro Configuration index path traversal

A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as critical. Affected is an unknown function of the file /index of the component Shiro Configuration. The manipulation leads to path traversal. It is possible to launch the attack...

CVE-2025-8815

CVE-2025-8815 affects 猫宁i Morning, with a path traversal vulnerability in the Shiro Configuration component. Affected is an unknown function within the /index file, enabling remote exploitation. Descriptions consistently indicate the product uses a rolling release model, and no version details fo...

CVE-2025-8815 猫宁i Morning Shiro Configuration index path traversal

A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as critical. Affected is an unknown function of the file /index of the component Shiro Configuration. The manipulation leads to path traversal. It is possible to launch the attack...

PT-2025-32490

Name of the Vulnerable Software and Affected Versions: 猫宁i Morning affected versions not specified Description: A critical path traversal issue exists in the Shiro Configuration component of 猫宁i Morning. The issue affects an unknown function within the /index file. This allows for remote...

CVE-2025-8772 Vinades NukeViet Module index.php server-side request forgery

A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack m...

CVE-2025-8772 Vinades NukeViet Module index.php server-side request forgery

A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack m...

CVE-2021-39433

A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...

CVE-2025-4941

A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

74cms 安全漏洞

74cms is an online recruitment system based on PHP and MySQL by 74cms. A security vulnerability exists in 74cms 3.33.0 and earlier versions, which stems from improper manipulation of the parameter url in the file /index.php/index/download/index, which could lead to path traversal attacks...

CVE-2024-10336

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...

CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

code-projects Online Shoe Store 安全漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store has an Improper Access Control vulnerability that stems from multiple parameters in the /admin/index.php page containing an improper access control vulnerability. No details of the vulnerability are available at this time...

PHPGurukul IFSC Code Finder Project 安全漏洞

PHPGurukul IFSC Code Finder Project is an IFSC code finder project from PHPGurukul. A security vulnerability exists in version v1.0 of the PHPGurukul IFSC Code Finder Project, which stems from a reflected cross-site scripting vulnerability contained in the searchifsccode parameter in the...

CVE-2024-44812

SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component...

CVE-2024-33992

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'...

School Event Management System 安全漏洞

School Event Management System is a school event management system. A security vulnerability exists in School Event Management System version 1.0. The vulnerability can be exploited to send a specially crafted JavaScript load to a user to take over their browser session via the "id" and "view in...

CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

Campcodes Online Job Finder System SQL Injection Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from a SQL injection vulnerability in the id parameter of the /admin/vacancy/index.php file...