44 matches found
CVE-2025-8967
The CVE-2025-8967 entry concerns itsourcecode Online Tour and Travel Management System 1.0. A SQL injection flaw exists in the file /admin/operations/packages.php, caused by manipulating the pname argument in an unknown function. This vulnerability allows remote exploitation (attack vector: netwo...
PT-2025-33309 · Itsourcecode · Itsourcecode Online Tour/Travel Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The vulnerability is located in the /admin/operations/packages.p...
itsourcecode Online Tour and Travel Management System 注入漏洞
itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system . An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which results from SQL injection due to incorrect manipulation...
Daily Expense Manager update.php File SQL Injection Vulnerability
Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the parameters pname, pprice, and id in the file /update.php. No details of the vulnerabilit...
CVE-2025-40731
SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php...
Code-Projects Daily Expense Manager SQL注入漏洞
Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the parameters pname, pprice, and id in the file /update.php. No details of the vulnerabilit...
CVE-2024-1871
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...
CVE-2024-46241
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...
Dairy Farm Shop Management System Cross-Site Scripting Vulnerability
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the pname parameter of the...
CVE-2024-46241
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...
CVE-2024-46241
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...
CVE-2024-46241
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...
CVE-2024-7225
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...
Insurance Management System 跨站脚本漏洞
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in Insurance Management System version 1.0, which stems from the parameter pname in the file /Script/admin/core/updatepolicy that result...
CVE-2024-1871
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...
SourceCodester Employee Management System Cross-Site Scripting Vulnerability
SourceCodester Employee Management System is a php-based employee performance management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in the SourceCodester Employee Management System version 1.0, which stems from a cross-site scripting vulnerability due to incorrec...
CVE-2023-46580
Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...
CVE-2023-46580
Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...
Inventory Management System Cross-Site Scripting Vulnerability
Inventory Management System is an inventory management system by the individual developer of stemword. A cross-site scripting vulnerability exists in Inventory Management System version V1.0 that could allow an attacker to execute arbitrary code via the pname parameter of the editProduct.php...