2572 matches found
CVE-2025-3187
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-3187: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-2656
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2025-2656 PHPGurukul Zoo Management System login.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2025-2656: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2025-2385
A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be initiated remotely. The exploit has been...
PT-2025-11517
Name of the Vulnerable Software and Affected Versions code-projects Modern Bag version 1.0 Description A critical issue has been discovered, affecting the /login.php file. The manipulation of the userEmail and userPassword arguments leads to SQL injection. This issue can be exploited remotely...
CVE-2025-2385: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be initiated remotely. The exploit has been...
PT-2025-10446
Name of the Vulnerable Software and Affected Versions Quantico Tecnologia PRMV version 6.48 Description A critical vulnerability was found in Quantico Tecnologia PRMV, affecting an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the username argument...
CVE-2025-2050: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...
PT-2025-10017
Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System version 3.3 Description A critical vulnerability was found in the PHPGurukul User Registration & Login and User Management System. The issue affects an unknown functionality of th...
PT-2025-9727
Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Hotel Booking version 1.0 Description A critical vulnerability has been found in ProjectWorlds Online Hotel Booking. The issue affects an unknown function of the file /admin/login.php. Manipulation of the emailusername...
CVE-2025-1965: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument emailusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-1954 PHPGurukul Human Metapneumovirus Testing Management System login.php sql injection
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be...
PT-2025-9707
Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A critical issue has been found in the PHPGurukul Human Metapneumovirus Testing Management System. The problem affects an unknown functionality of the file...
CVE-2025-1954: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be...
CVE-2025-1859 PHPGurukul News Portal login.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...
CVE-2025-1859 PHPGurukul News Portal login.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...
CVE-2025-1842
A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...
CVE-2025-1842
CVE-2025-1842 affects FITSTATS Technologies AthleteMonitoring (up to version 20250302). The vulnerability is a cross-site scripting flaw in the /login.php login flow caused by manipulation of the username parameter in user input. It is exploitable remotely, and publicly disclosed exploits exist. ...