Lucene search
K

64 matches found

RedhatCVE
RedhatCVE
added 2025/10/12 10:5 a.m.2 views

CVE-2025-11595

A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performing a manipulation of the argument mobilenumber results in sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS4.9AI score0.00038EPSS
Exploits1References1
NVD
NVD
added 2025/10/11 10:15 a.m.5 views

CVE-2025-11595

A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performing a manipulation of the argument mobilenumber results in sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS0.00038EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/11 9:32 a.m.9 views

CVE-2025-11595 Campcodes Online Apartment Visitor Management System admin-profile.php sql injection

A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performing a manipulation of the argument mobilenumber results in sql injection. Remote exploitation of the attack is possible. The exploit has be...

5.8CVSS0.00038EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.3 views

CampCodes Online Apartment Visitor Management SQL注入漏洞

CampCodes Online Apartment Visitor Management is an online apartment visitor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Apartment Visitor Management version 1.0, which stems from an incorrect manipulation of the parameter mobilenumber in...

9.8CVSS5.6AI score0.00038EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.3 views

PT-2025-41668

Name of the Vulnerable Software and Affected Versions Campcodes Online Apartment Visitor Management System version 1.0 Description A SQL injection issue exists in Campcodes Online Apartment Visitor Management System version 1.0. The issue is located in the file /admin-profile.php and involves...

5.8CVSS5.1AI score0.00038EPSS
Exploits1References9
Cvelist
Cvelist
added 2025/09/11 11:15 a.m.4 views

CVE-2025-40687 SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'...

9.3CVSS0.00055EPSS
Exploits0References1
CVE
CVE
added 2025/09/11 11:15 a.m.11 views

CVE-2025-40687

CVE-2025-40687 affects Online Fire Reporting System v1.2 (PHPGurukul). The root cause is an SQL injection flaw in the /ofrs/admin/add-team.php endpoint, exploitable via the mobilenumber, teamleadname, and teammember parameters. This can allow an attacker to retrieve, create, update, and delete da...

9.8CVSS7.5AI score0.00055EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.2 views

PT-2025-37170

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a SQL injection flaw. This flaw allows an attacker to retrieve, create, update, and delete database information via the mobilenumber, teamleadname...

9.8CVSS7.2AI score0.00055EPSS
Exploits0References5
CNVD
CNVD
added 2025/09/04 12:0 a.m.2 views

Beauty Parlour Management System signup.php File SQL Injection Vulnerability

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in t...

9.8CVSS8AI score0.00087EPSS
Exploits1References1
OSV
OSV
added 2025/09/02 7:15 p.m.0 views

CVE-2025-9829

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /signup.php. The manipulation of the argument mobilenumber leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly...

9.8CVSS5.7AI score0.00087EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/09/02 6:32 p.m.8 views

CVE-2025-9829 PHPGurukul Beauty Parlour Management System signup.php sql injection

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /signup.php. The manipulation of the argument mobilenumber leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly...

7.5CVSS6.8AI score0.00087EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.3 views

PT-2025-35604

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A SQL injection issue exists in PHPGurukul Beauty Parlour Management System 1.1. The vulnerability is located in the /signup.php file, within an unknown function. Manipulati...

9.8CVSS7.5AI score0.00087EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/08/17 12:10 a.m.10 views

CVE-2025-8989

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.7AI score0.00072EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/16 10:28 p.m.4 views

CVE-2025-8985

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS7.7AI score0.00072EPSS
Exploits1References1
OSV
OSV
added 2025/08/15 1:16 a.m.0 views

CVE-2025-8989

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00072EPSS
Exploits1References5
NVD
NVD
added 2025/08/15 1:16 a.m.7 views

CVE-2025-8989

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00072EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/14 11:32 p.m.3 views

CVE-2025-8989 SourceCodester COVID 19 Testing Management System edit-phlebotomist.php sql injection

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS7.6AI score0.00072EPSS
Exploits1References5
NVD
NVD
added 2025/08/14 10:15 p.m.1 views

CVE-2025-8985

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS0.00072EPSS
Exploits1References5
OSV
OSV
added 2025/08/14 10:15 p.m.1 views

CVE-2025-8985

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00072EPSS
Exploits1References5
CVE
CVE
added 2025/08/14 9:32 p.m.12 views

CVE-2025-8985

CVE-2025-8985 affects SourceCodester COVID 19 Testing Management System 1.0. The vulnerability is in /profile.php where manipulating the mobilenumber parameter enables SQL injection, allowing remote access. Exploitation status is documented as a PROOF-OF-CONCEPT in CVSS/4.0 data; no official patc...

9.8CVSS7.6AI score0.00072EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder