1021 matches found
CVE-2025-3184: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection. The attack may be...
CVE-2025-2683 PHPGurukul Bank Locker Management System profile.php sql injection
A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-2683 PHPGurukul Bank Locker Management System profile.php sql injection
A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-2683: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-2646 PHPGurukul Art Gallery Management System admin-profile.php sql injection
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...
CVE-2025-2646: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...
PT-2025-12518
Name of the Vulnerable Software and Affected Versions PHPGurukul Bank Locker Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Bank Locker Management System. This issue affects unknown code of the file /profile.php. The manipulation of the mobilenumber...
CVE-2025-29427
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...
CVE-2025-29427
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...
CVE-2025-2380 PHPGurukul Apartment Visitors Management System admin-profile.php sql injection
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. T...
CVE-2025-2380 PHPGurukul Apartment Visitors Management System admin-profile.php sql injection
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. T...
CVE-2025-2374
CVE-2025-2374 affects PHPGurukul Human Metapneumovirus Testing Management System 1.0. The vulnerability is a SQL injection in the profile.php handling of the parameters aid/adminname/mobilenumber/email, allowing an attacker to manipulate SQL statements remotely. The issue stems from unsafely proc...
CVE-2025-2374 PHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...
PT-2025-11473
Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A problematic issue was found in the Admin Profile Page component, specifically in the /profile.php file. The email argument is vulnerable to cross-site scripti...
PT-2025-11472
Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A critical issue has been found in the processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql...
PT-2025-11501
Name of the Vulnerable Software and Affected Versions PHPGurukul Apartment Visitors Management System version 1.0 Description A critical issue affects the processing of the file /admin-profile.php, where the manipulation of the mobilenumber argument leads to SQL injection. This issue can be...
PT-2025-11541
Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It affects the profile.php file via the member first and member last parameters. This allows for potenti...
CVE-2025-29427
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...
CVE-2025-29427
The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to a Cross Site Scripting (XSS) attack within the profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data in the member_first and member_last parameters. This vulnerability ...