2139 matches found
CVE-2025-9013
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-9013 PHPGurukul Online Shopping Portal Project password-recovery.php sql injection
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-9013
Summary of vulnerability (CVE-2025-9013) : PHPGurukul Online Shopping Portal Project 2.0 has a SQL injection flaw in the file /shopping/password-recovery.php triggered by manipulating the emailid parameter. This vulnerability can be exploited remotely and has publicly disclosed exploits. Multiple...
CVE-2025-9013 PHPGurukul Online Shopping Portal Project password-recovery.php sql injection
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
PT-2025-33445 · Phpgurukul · Phpgurukul Online Shopping Portal Project
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal Project 2.0 Description: A vulnerability exists in PHPGurukul Online Shopping Portal Project 2.0, affecting unknown code within the /shopping/password-recovery.php file. Manipulation of the emailid argument c...
PHPGurukul Online Shopping Portal Project 注入漏洞
Online Shopping Portal Project is an online shopping portal project. A SQL injection vulnerability exists in Online Shopping Portal Project, which originates from the lack of validation of externally-entered SQL statements in the parameter emailid in the file /shopping/password-recovery.php. An...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
PT-2025-33008 · Makeplane · Makeplane
Name of the Vulnerable Software and Affected Versions: makeplane plane version 0.23.1 Description: The software contains a server side request forgery SSRF vulnerability in the password recovery functionality. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
Plane 安全漏洞
Plane is an open source, self-hosted project planning tool from Plane Open Source. A security vulnerability exists in Plane version 0.23.1, which stems from a server-side request forgery in the password recovery feature...
CVE-2025-50251
CVE-2025-50251 describes a server-side request forgery (SSRF) in Makeplane (plane) version 0.23.1, triggered via the password recovery feature. The vulnerability affects makeplane plane 0.23.1 and is classified with high impact for confidentiality and integrity, with a CVSS v3.1 base score of 9.1...
CVE-2025-51045
Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...
Pre-School Enrollment System SQL Injection Vulnerability
Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the /admin/password-recovery.php file not adequately validating the username parameter. An attacker can exploit this...
CVE-2025-51045
Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...
CVE-2025-51045
Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...
PHPGurukul Pre-School Enrollment System 安全漏洞
Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the /admin/password-recovery.php file not adequately validating the username parameter. An attacker can exploit this...
PT-2025-31252 · Unknown · Phpgurukul Pre-School Enrollment System
Name of the Vulnerable Software and Affected Versions: Phpgurukul Pre-School Enrollment System version 1.0 Description: The application contains a SQL injection vulnerability in the /admin/password-recovery.php file. This is due to insufficient validation of the username parameter. Recommendation...
CVE-2025-51045
Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. This vulnerability is attributed to the insufficient validation of user input for the username parameter...