itsourcecode Online Laundry Management System SQL注入漏洞

itsourcecode Online Laundry Management System is an online laundry management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Laundry Management System, which stems from an incorrect manipulation of the parameter Username in the fil...

SourceCodester Pet Grooming Management Software SQL注入漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. SourceCodester Pet Grooming Management Software version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

SourceCodester Pet Grooming Management Software 代码问题漏洞

SourceCodester Pet Grooming Management Software is a SourceCodester open source pet grooming management system. A code issue vulnerability exists in version 1.0 of SourceCodester Pet Grooming Management Software, which stems from an incorrect manipulation of the parameter websiteimage in the file...

PT-2025-37480

Name of the Vulnerable Software and Affected Versions: Campcodes Computer Sales and Inventory System version 1.0 Description: A security issue exists in Campcodes Computer Sales and Inventory System 1.0. The vulnerability is due to SQL injection in an unknown function of the file /pages/cust...

PT-2025-37462

Name of the Vulnerable Software and Affected Versions: Campcodes Computer Sales and Inventory System version 1.0 Description: A weakness exists in Campcodes Computer Sales and Inventory System that allows for SQL injection. The issue is located in an unknown function of the file /pages/sup...

Openfire 安全漏洞

Openfire is an open source real-time collaboration RTC server from Ignite Realtime. A security vulnerability exists in Openfire versions 5.0.2 and 5.1.0 that stems from not properly handling user identities in X.509 certificates, which could allow an attacker to impersonate another user...

Yida ECMS Consulting Enterprise Management System 代码注入漏洞

Yida ECMS Consulting Enterprise Management System is an enterprise management system from Yida. A code injection vulnerability exists in Yida ECMS Consulting Enterprise Management System version 1.0, which originates from an incorrect operation of the requestUrl parameter in the file /login.do, a...

SourceCodester Pet Grooming Management Software SQL注入漏洞

SourceCodester Pet Grooming Management Software is a SourceCodester open source pet grooming management system. SourceCodester Pet Grooming Management Software version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

erjinzhi 10OA 安全漏洞

erjinzhi 10OA is an enterprise automation system from China Binary erjinzhi. A security vulnerability exists in erjinzhi 10OA version 1.0, which stems from an incorrect manipulation of the parameter File in the file /view/file.aspx, which could lead to path traversal...

PT-2025-37077

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 7.1.0 through 24.2.2 Description: Pega Platform is affected by a Stored Cross-Site Scripting XSS issue within a user interface component. Exploitation requires a user with high privileges and a developer role...

CVE-2025-58980

Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export WP Page to Static HTML/CSS: from n/a through = 4.1.0...

CVE-2025-10113

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has...

CVE-2025-10112 itsourcecode Student Information Management System index.php sql injection

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

CVE-2025-10102 code-projects Online Event Judging System index.php sql injection

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been release...

Code-Projects Online Event Judging System 安全漏洞

Code-Projects Online Event Judging System is an open source online event judging system from Code-Projects. A security vulnerability exists in code-projects Online Event Judging System version 1.0, which stems from a SQL injection due to incorrect manipulation of the mainevent parameter...

SourceCodester Time Tracker 代码注入漏洞

SourceCodester Time Tracker is an open source personal time tracking tool from SourceCodester. A code injection vulnerability exists in SourceCodester Time Tracker version 1.0, which stems from improper handling of parameters in the /index.html file, and could lead to cross-site scripting attacks...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

CVE-2025-10066

A security vulnerability has been detected in itsourcecode POS Point of Sale System 1.0. The affected element is an unknown function of the file /inventory/main/vendors/datatables/unittesting/templates/dymanictable.php. Such manipulation of the argument scripts leads to cross site scripting. The...

CVE-2025-58886

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tan Nguyen Instant Locations instant-locations allows Stored XSS.This issue affects Instant Locations: from n/a through = 1.0...