CVE-2022-30512

CVE-2022-30512 School Dormitory Management System 1.0 – Nicht authentifizierte SQL-Injection Exploit-Titel: School Dormitory Management System 1.0 – Nicht authentifizierte SQL-Injection Datum: 2022-05-25 CVE: CVE-2022-30512 Exploit-Autor: Abdulaziz Saad @b4zb0z Hersteller-Startseite:...

CVE-2022-30514

CVE-2022-30514 Sistema di gestione dei dormitori scolastici 1.0 - XSS riflesso Titolo dell'exploit: Sistema di gestione dei dormitori scolastici 1.0 - XSS riflesso Data: 2022-05-25 CVE: CVE-2022-30514 Autore dell'exploit: Abdulaziz Saad @b4zb0z Homepage del fornitore:...

CVE-2024-10557

Betroffene Version: BloodBank Management System : 1.0 Informationen zur Schwachstelle: Schwachstellentyp: Cross Site Request Forgery CSRF Schweregrad: HOCH Status: Nicht gepatcht Verwundbarer Endpunkt: Pfad: /file/updateprofile.php Beschreibung der Schwachstelle: Am Endpunkt /file/updateprofile.p...

CVE-2022-33075

CVE-2022-33075 Título do Exploit: Zoo Management System 1.0 - Cross-Site-Scripting XSS Armazenado Data: 26/05/2022 Autor do Exploit: Angelo Pio Amirante Homepage do Fornecedor: https://www.sourcecodester.com/ Link do Software:...

CVE-2022-31897

CVE-2022-31897 Data: 06/22/2022 Autore dell'exploit: Angelo Pio Amirante Homepage del fornitore: https://www.sourcecodester.com/ Link del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versione: 1.0...

CVE-2024-48245

CVE-2024-48245 Vulnerabilidade de SQL Injection no Vehicle Management System 1.0 - 1.3 Descrição O Vehicle Management System 1.0 é vulnerável a SQL Injection. Usuários convidados com baixa autenticação ou contas administrativas podem explorar parâmetros POST vulneráveis em vários endpoints para...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - Cross-Site Scripting XSS memorizzato Descrizione Vehicle Management System 1.0 contiene una vulnerabilità di Cross-Site Scripting XSS memorizzato nel parametro Name di /vehicle-management/booking.php. Un attore malintenzionato può iniettare payload...

CVE-2024-51430

CVE-2024-51430 Tipo di vulnerabilità Cross-Site Scripting XSS Descrizione Una vulnerabilità di Cross Site Scripting nel sistema di gestione del laboratorio diagnostico online che utilizza PHP v.1.0 consente a un attaccante remoto di eseguire codice arbitrario tramite il parametro Nome Test sul...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78200

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

EUVD-2026-64734

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78200 itsourcecode Library Management System editbooks.php sql injection

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78200

itsourcecode Library Management System 1.0 is affected by a SQL injection vulnerability in the file editbooks.php . Manipulating the ID argument in an unknown function of this file allows a remote attacker to inject SQL queries. The CVSS 3.1 base score is 6.3 (MEDIUM) with low impact on confident...

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

EUVD-2026-64647

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112

A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...

CVE-2026-78059

A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /phpaction/printOrder.php. Such manipulation of the argument clientName/clientContact leads to cross site scripting. The attack may be performed from remote. The explo...

CVE-2026-78057

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

CVE-2026-78056

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument rollno/teachername results in sql injection. The attack can be...

CVE-2026-78059 SourceCodester Stock Management System printOrder.php cross site scripting

A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /phpaction/printOrder.php. Such manipulation of the argument clientName/clientContact leads to cross site scripting. The attack may be performed from remote. The explo...