359 matches found
CVE-2025-7180
A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely. The exploit has been...
Code-Projects Student Enrollment System 注入漏洞
Code-Projects Student Enrollment System is an open source student management system from Code-Projects. An injection vulnerability exists in code-projects Student Enrollment System version 1.0, which stems from improper manipulation of the parameter Username in the file /login.php, which could le...
Code-Projects Staff Audit System 注入漏洞
Code-Projects Staff Audit System is a Code-Projects open source staff audit system. Code-Projects Staff Audit System version 1.0 suffers from an injection vulnerability that stems from improper manipulation of the parameter User in the file /login.php, which can lead to SQL injection attacks...
Code-Projects Movie Ticketing System 注入漏洞
Code-Projects Movie Ticketing System is Code-Projects open source movie ticketing system. Code-Projects Movie Ticketing System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to a misuse of the parameter postName in the file /logIn.php...
SourceCodester Simple Company Website 注入漏洞
SourceCodester Simple Company Website is a simple company website from SourceCodester, Inc. An injection vulnerability exists in SourceCodester Simple Company Website version 1.0, which originates from a SQL injection due to the incorrect operation of the parameter Username in the file...
Online Bidding System login.php File SQL Injection Vulnerability
Online Bidding System is an online bidding system. Online Bidding System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter User in the file /login.php. An attacker can exploit this vulnerability to execute...
Hostel Management System /login-hm.inc.php File SQL Injection Vulnerability
Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the Username parameter of the /includes/login-hm.inc.php file. An attacker can use this...
CampCodes Online Hospital Management System 注入漏洞
CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which originates from a SQL injection due to an incorrect operation of the parameter Userna...
CVE-2025-6154
CVE-2025-6154 affects PHPGurukul Hostel Management System 1.0. The flaw resides in /includes/login.inc.php where manipulation of the student_roll_no parameter enables SQL injection. The issue can be triggered remotely and the exploit has been disclosed publicly. Connected sources corroborate a SQ...
CVE-2025-5716
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
SourceCodester PHP Display Username After Login 安全漏洞
SourceCodester PHP Display Username After Login is an open source management system from SourceCodester. A security vulnerability exists in SourceCodester PHP Display Username After Login version 1.0, which is caused by a SQL injection due to an incorrect manipulation of the parameter Username in...
Student Record System /login.php File SQL Injection Vulnerability
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /login.php. An attacker can exploit this vulnerability to execute...
CVE-2023-0917
A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack...
CVE-2023-1798
A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument typename leads to cross site scripting. The attack may be launched remotely. The exploit has be...
CVE-2023-1294
A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /filemanager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is...
CVE-2023-1037
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql...
CVE-2023-1674
A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. T...
CVE-2023-1799
A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2023-1253
A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...