Lucene search
+L

8634 matches found

CNNVD
CNNVD
added 2025/09/02 12:00 a.m.9 views

RemoteClinic 安全漏洞

RemoteClinic is a clinic management system from RemoteClinic open source. A security vulnerability exists in RemoteClinic version 2.0, which stems from a SQL injection due to incorrect manipulation of the parameter ID in the file /staff/profile.php...

5.8CVSS5.6AI score0.0026EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-28329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of profile field availability condition resulted in an SQL injection risk by default only available to teachers and managers...

8.8CVSS6.5AI score0.01195EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.8 views

PT-2025-35612

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A weakness exists in PHPGurukul Beauty Parlour Management System 1.1. The issue is related to SQL injection in the /admin/edit-services.php file. Manipulation of the sername...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/09/02 12:00 a.m.5 views

Simple Grading System login.php File SQL Injection Vulnerability

Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /login.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

9.8CVSS8.2AI score0.00596EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/02 12:00 a.m.38 views

Online Course Registration admin/student-registration.php File SQL Injection Vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter studentname in the file /admin/student-registration.php. An...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-41320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses...

9.8CVSS8.3AI score0.31871EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/09/02 12:00 a.m.11 views

Simple Grading System delete_account.php File SQL Injection Vulnerability

Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID in the file /deleteaccount.php. An attacker can exploit this vulnerability to execute...

8.8CVSS8.2AI score0.00381EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/01 2:16 p.m.8 views

CVE-2025-9690

A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

8.8CVSS6.5AI score0.00319EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/09/01 7:32 a.m.16 views

CVE-2025-9768 itsourcecode Sports Management System mode.php sql injection

A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely...

6.5CVSS0.00437EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/01 6:15 a.m.8 views

CVE-2025-9764

A flaw has been found in itsourcecode Sports Management System 1.0. Impacted is an unknown function of the file /Admin/resultdetails.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/01 6:02 a.m.40 views

CVE-2025-9765

CVE-2025-9765 affects the itsourcecode Sports Management System 1.0. Multiple connected sources confirm a SQL injection in the /Admin/tournament_details.php file, triggered by manipulating the ID parameter due to lack of input validation. Exploitation can be remote, and public disclosure is noted...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/09/01 5:15 a.m.14 views

CVE-2025-9763

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /studentsignup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be...

9.8CVSS0.00421EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.16 views

PT-2025-35459

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A vulnerability exists in itsourcecode Sports Management System 1.0. The issue involves a SQL injection affecting an unknown function within the /Admin/tournament details.php file...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.10 views

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter ID in file /Admin/tournamentdetails.php. An attacker can exploit this vulnerability t...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.12 views

CampCodes Online Learning Management System 安全漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Online Learning Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter Userna...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.8 views

PT-2025-35443

Name of the Vulnerable Software and Affected Versions: deepakmisal24 Chemical Inventory Management System version 1.0 Description: A vulnerability exists in deepakmisal24 Chemical Inventory Management System version 1.0. Manipulation of the chem name argument in the /inventory form.php file can...

6.5CVSS6.6AI score0.00393EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.10 views

itsourcecode Sports Management System 安全漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/facilitator.php. An attacker can exploit this vulnerabili...

9.8CVSS7.9AI score0.00596EPSS
SaveExploits1References7
CVE
CVE
added 2025/08/31 7:02 p.m.24 views

CVE-2025-9742

CVE-2025-9742 affects code-projects' Human Resource Integrated System 1.0. The vulnerability arises from improper handling of the login.php input, where manipulation of the user/pass parameters enables SQL injection. Impact stated in sources includes potential remote exploitation and data exposur...

7.5CVSS7.3AI score0.00445EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/31 6:32 p.m.20 views

CVE-2025-9741 code-projects Human Resource Integrated System login_query12.php sql injection

A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /loginquery12.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

7.5CVSS0.00409EPSS
SaveExploits1References5
OSV
OSV
added 2025/08/31 6:15 p.m.9 views

CVE-2025-9739

A vulnerability has been found in Campcodes Online Water Billing System 1.0. Affected by this issue is some unknown functionality of the file /process.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.7AI score0.00415EPSS
SaveExploits1References5
Rows per page
Query Builder