PT-2026-2265

Name of the Vulnerable Software and Affected Versions Imaster MEMS Events CRM affected versions not specified Description The software contains an SQL injection issue in the phone parameter of the '/memsdemo/login.php' API endpoint. This allows for full database access without authentication...

MEMS - Events CRM SQL注入漏洞

MEMS - Events CRM is a Customer Relationship Management system by the individual developer Nzioka Victor. A SQL injection vulnerability exists in MEMS - Events CRM, which originates from a SQL injection vulnerability in the phone parameter in /memsdemo/login.php...

CVE-2023-45342

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2025-1475

The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5. This is due to insufficient verification on the 'userphone' parameter when logging in. This makes it possible for unauthenticated attackers to log in as any existing user on t...

CVE-2025-12928

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and ma...

CVE-2025-12928

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and ma...

Code-Projects Online Job Search Engine SQL注入漏洞

Code-Projects Online Job Search Engine is an online job search engine from Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Job Search Engine version 1.0, which stems from incorrect manipulation of the username/phone parameter in the file /login.php, which could lead to...

EUVD-2022-44555

Malicious code in bioql PyPI...

EUVD-2025-7400

Malicious code in bioql PyPI...

EUVD-2025-32092

Malicious code in bioql PyPI...

EUVD-2025-26457

Malicious code in bioql PyPI...

EUVD-2025-29836

Malicious code in bioql PyPI...

CVE-2025-40645

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645

CVE-2025-40645 relates to ViDay/Viday. An unauthenticated attacker can retrieve sensitive customer information by issuing an HTTP GET to /api/reserva/web/clients with the phone parameter. Technical details from sources: CVSS v4.0 base score 8.7 (HIGH) with NETWORK attack vector, LOW attack comple...

PT-2025-40329

Name of the Vulnerable Software and Affected Versions Viday affected versions not specified Description An unauthenticated attacker can obtain sensitive customer information by sending an HTTP GET request to the /api/reserva/web/clients API endpoint. The vulnerability involves the exposure of...

CVE-2025-10625

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...

CVE-2025-10625

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...

CVE-2025-10625

The CVE-2025-10625 entry concerns SourceCodester Online Exam Form Submission 1.0. A SQL injection vulnerability exists in the /user/dashboard.php?page=update_profile handler, triggered by manipulating the phone parameter (and potentially other parameters). The vulnerability is exploitable remotel...

CVE-2025-10625 SourceCodester Online Exam Form Submission dashboard.php sql injection

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...