354 matches found
CVE-2025-45885
PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries...
CVE-2025-45885
PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries...
PT-2025-18698 · Unknown · Phpgurukul Covid19 Testing Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul COVID19 Testing Management System. The issue affects some unknown functionality of the file /login.php. The...
PHPGurukul COVID19 Testing Management System 安全漏洞
The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter Username in the file /login.php resulting in SQL injection. No details ...
CVE-2025-4075 VMSMan login.php cross site scripting
A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "alert1 leads to cross site scripting. The attack may be launched remotely. The...
CVE-2025-3555 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication
A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...
eCommerce-website-in-PHP 安全漏洞
eCommerce-website-in-PHP is a free and open source php e-commerce platform for scriptandtools individual developers. A security vulnerability exists in eCommerce-website-in-PHP version 3.0, which stems from an improperly restricted authentication attempt in file /login.php...
CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection
A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...
CVE-2025-3187
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...
PHPGurukul e-Diary Management System 安全漏洞
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the logindetail parameter of the login.php file. An attacker can...
CVE-2025-2709 Yonyou UFIDA ERP-NC login.jsp cross site scripting
A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...
CVE-2025-2050
A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...
CVE-2024-10733
A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2024-10335
A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...
CVE-2024-8081
A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has...
PT-2025-3940 · Unknown · 1000 Projects Campaign Management System Platform For Women
Name of the Vulnerable Software and Affected Versions: 1000 Projects Campaign Management System Platform for Women version 1.0 Description: A critical issue affects the 1000 Projects Campaign Management System Platform for Women, where the manipulation of the Username argument in the file...
PT-2025-3939 · Unknown · 1000 Projects Campaign Management System Platform For Women
Name of the Vulnerable Software and Affected Versions: 1000 Projects Campaign Management System Platform for Women version 1.0 Description: A critical issue has been identified, affecting an unknown functionality of the file /Code/sc login.php. The manipulation of the uname argument leads to SQL...
PT-2025-3916 · Fanli2012 · Native-Php-Cms
Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /fladmin/login.php. The manipulation of the username argument leads to SQL injection. This issue...
CVE-2025-0210
A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...
PT-2024-17929 · Unknown · Phpgurukul Land Record System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A critical issue has been found in the PHPGurukul Land Record System, affecting some unknown functionality of the file /admin/login.php. The manipulation of the username argument leads to...