CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

PT-2025-32290 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...

CVE-2023-41531

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters...

CVE-2023-41528

CVE-2023-41528 concerns Hospital Management System v4, where the component in question is the file/endpoint responsible for contact handling. The vulnerability is described as multiple SQL injection flaws in contact.php triggered by the parameters txtname, txtphone, and txtmail. According to the ...

CVE-2023-41521

CVE-2023-41521 affects Student Attendance Management System v1, which contains multiple SQL injection flaws in createSessionTerm.php reachable via the id, termId, and sessionName parameters. The reported impact is severe (CVSS v3.1 base score 8.8, high confidentiality, integrity, and availability...

PT-2025-32300 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System contains multiple SQL injection vulnerabilities in the func3.php file. These vulnerabilities are present through the username1 and password2 parameters...

CVE-2023-41522

Student Attendance Management System v1 contains multiple SQL injection vulnerabilities in createStudents.php, exploitable via Id, firstname, and admissionNumber parameters due to improper input handling. CVSS v3.1 metrics indicate HIGH impact on confidentiality, integrity, and availability, with...

PT-2025-32289 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createSessionTerm.php file. These flaws are present through the id, termId, and...

CVE-2023-41521

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...

CVE-2023-41528

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters...

CVE-2023-41531

CVE-2023-41531 affects Hospital Management System v4, with multiple SQL injection flaws in the vulnerable file func3.php, exploitable via the parameters username1 and password2. The issue enables unauthenticated or basic-privilege users to manipulate queries, consistent with a CVSS3.1 base score ...

CVE-2023-41520

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...

CVE-2023-41520

CVE-2023-41520 affects Student Attendance Management System v1. The vulnerability lies in createClassArms.php, where SQL injection can be introduced via the parameters classId and classArmName. Affected component is the server-side PHP script responsible for managing class arms. The CVE metrics i...

WordPress SQLsplorer Challenge: Bigger Scope and Bounties for All Researchers in the Wordfence Bug Bounty Program

From now through September 22, 2025 , we’re running our SQLsplorer Challenge , focused on SQL Injection vulnerabilities. During this challenge, we’re expanding the scope of the Wordfence Bug Bounty Program to encourage deeper research into SQL Injection vulnerabilities and broader participation...

CVE-2025-24290

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application Version 2.4.206 and earlier could allow a malicious actor with low privileges to escalate privileges...

CVE-2025-24290

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application Version 2.4.206 and earlier could allow a malicious actor with low privileges to escalate privileges...

Code Injection Vulnerabilities in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications...

CVE-2025-45987

This CVE affects Blink router models: BL-WR9000 (v2.4.9), BL-AC2100 AZ3 (v1.0.4), BL-X10 AC8 (v1.0.5), BL-LTE300 (v1.2.3), BL-F1200 AT1 (v1.0.0), BL-X26 AC8 (v1.2.8), BLAC450M AE4 (v4.0.0), and BL-X26 DA3 (v1.2.7). The issue is multiple command injection in the bs_SetDNSInfo function via dns1 and...

CVE-2025-45988

The CVE-2025-45988 entry affects Blink routers (BL-WR9000, BL-AC2100 AZ3, BL-X10 AC8, BL-LTE300, BL-F1200 AT1, BL-X26 AC8, BLAC450M AE4, BL-X26 DA3) with multiple command injection vulnerabilities in the bs_SetCmd function via the cmd parameter. Root cause: improper handling of the cmd parameter ...

CVE-2025-45988

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...