Lucene search
+L

1021 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•10 views

CVE-2025-3184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection. The attack may be...

9.8CVSS7AI score0.00603EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/24 4:31 a.m.•44 views

CVE-2025-2683 PHPGurukul Bank Locker Management System profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00537EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/03/24 4:31 a.m.•15 views

CVE-2025-2683 PHPGurukul Bank Locker Management System profile.php sql injection

A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7AI score0.00537EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•5 views

CVE-2025-2683: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/23 9:31 a.m.•52 views

CVE-2025-2646 PHPGurukul Art Gallery Management System admin-profile.php sql injection

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...

7.5CVSS0.00537EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•8 views

CVE-2025-2646: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•5 views

PT-2025-12518

Name of the Vulnerable Software and Affected Versions PHPGurukul Bank Locker Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Bank Locker Management System. This issue affects unknown code of the file /profile.php. The manipulation of the mobilenumber...

9.8CVSS6.8AI score0.00537EPSS
SaveExploits1References19
RedhatCVE
RedhatCVE
•added 2025/03/19 12:27 a.m.•40 views

CVE-2025-29427

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

5.9CVSS5.8AI score0.00268EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/17 7:15 p.m.•24 views

CVE-2025-29427

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

5.9CVSS0.00268EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/17 2:00 p.m.•20 views

CVE-2025-2380 PHPGurukul Apartment Visitors Management System admin-profile.php sql injection

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. T...

7.5CVSS7AI score0.00544EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/17 2:00 p.m.•42 views

CVE-2025-2380 PHPGurukul Apartment Visitors Management System admin-profile.php sql injection

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. T...

7.5CVSS0.00544EPSS
SaveExploits1References5
CVE
CVE
•added 2025/03/17 11:00 a.m.•87 views

CVE-2025-2374

CVE-2025-2374 affects PHPGurukul Human Metapneumovirus Testing Management System 1.0. The vulnerability is a SQL injection in the profile.php handling of the parameters aid/adminname/mobilenumber/email, allowing an attacker to manipulate SQL statements remotely. The issue stems from unsafely proc...

8.8CVSS6.4AI score0.00455EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/17 11:00 a.m.•14 views

CVE-2025-2374 PHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...

6.5CVSS6.4AI score0.00455EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•8 views

PT-2025-11473

Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A problematic issue was found in the Admin Profile Page component, specifically in the /profile.php file. The email argument is vulnerable to cross-site scripti...

5.4CVSS4.6AI score0.00359EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•7 views

PT-2025-11472

Name of the Vulnerable Software and Affected Versions PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description A critical issue has been found in the processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql...

8.8CVSS6.3AI score0.00455EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•8 views

PT-2025-11501

Name of the Vulnerable Software and Affected Versions PHPGurukul Apartment Visitors Management System version 1.0 Description A critical issue affects the processing of the file /admin-profile.php, where the manipulation of the mobilenumber argument leads to SQL injection. This issue can be...

9.8CVSS7.1AI score0.00544EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•7 views

PT-2025-11541

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It affects the profile.php file via the member first and member last parameters. This allows for potenti...

5.9CVSS5.8AI score0.00268EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/03/17 12:00 a.m.•13 views

CVE-2025-29427

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

5.8AI score0.00268EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/17 12:00 a.m.•84 views

CVE-2025-29427

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to a Cross Site Scripting (XSS) attack within the profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data in the member_first and member_last parameters. This vulnerability ...

5.9CVSS5.8AI score0.00268EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/03/17 12:00 a.m.•38 views

CVE-2025-29427

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

0.00268EPSS
SaveExploits1References1
Rows per page
Query Builder