CVE-2025-2869

Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manageuser.php...

PT-2024-31231

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Forum Website version 1.0 Description The issue is a SQL injection vulnerability. It affects the /php-sqlite-forum/?page=manage user&id= endpoint, where the id parameter is vulnerable. This could potentially lead to data...

PT-2022-20989

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue concerns SQL Injection via the id variable in the /rdms/admin?page=user/manage user&id= API endpoint. This allows for potential unauthorized access and manipulation of data...

PT-2022-21257

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/?page=user/manage user&id=" endpoint. This allows for potential exploitation. No information is provided about the estimated number of...

PT-2022-21244

Name of the Vulnerable Software and Affected Versions Hospital's Patient Records Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /hprms/admin/?page=user/manage user&id= endpoint. The id variable is vulnerable to SQL injection...

PT-2022-21010

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=user/manage user&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized data...

PT-2022-20701

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns SQL Injection via the /ocwbs/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. No information is provided about the...

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

PT-2022-20083

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /sns/admin/?page=user/manage user&id= endpoint. The id parameter is vulnerable to injection attacks. Thi...

PT-2022-20108

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the ctpms/admin/?page=user/manage user&id= endpoint, specifically...

PT-2022-19942

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /cms/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. Recommendation...

PT-2022-19810

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /mtms/admin/?page=user/manage user&id= endpoint. This allows for potential exploitation by injecting malicious SQL code. The id...