SourceCodester Student Result Management System 代码注入漏洞

SourceCodester Student Result Management System is a SourceCodester open source student result management system . A code injection vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from an incorrect operation of the parameter Remark in the file...

CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

CVE-2025-5079

A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit ha...

CVE-2025-5079: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit ha...

CVE-2025-4332: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /visitor-detail.php. The manipulation of the argument editid/remark leads to sql injection. The attack may be launched remotel...

CVE-2025-3828

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/view-appointment.php?viewid=11. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. T...

CVE-2025-3828: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/view-appointment.php?viewid=11. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. T...

CVE-2025-3213: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /view-note.php?noteid=11. The manipulation of the argument remark leads to sql injection. The attack can be initiated remotely. The exploit has been...

The vulnerability of the modifyWifiFilterRules() function in the Tenda W15E router software allows a hacker to trigger a service failure.

The vulnerability of the modifyWifiFilterRules function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wifiFilterListRemark parameter. Exploiting this vulnerability could allow a remote attacker t...

CVE-2025-25662

Tenda O4 V3.0 V1.0.0.102936 is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time...

CVE-2025-25662: Buffer Copy without Checking Size of Input

Tenda O4 V3.0 V1.0.0.102936 is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time...

CVE-2021-39199

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

PT-2025-3869 · Unknown · Longpi1 Warehouse

Name of the Vulnerable Software and Affected Versions: longpi1 warehouse version 1.0 Description: A cross-site scripting issue has been found in the longpi1 warehouse software. The vulnerability affects an unknown functionality of the file /resources/..;/inport/updateInport of the Backend...

CVE-2024-10759: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-pig.php. The manipulation of the argument pigno/weight/arrived/breed/remark/status leads to sql injection. The attack can be initiated...

itsourcecode Farm Management System SQL注入漏洞

itsourcecode Farm Management System is an itsourcecode open source farm management system. SQL injection vulnerability exists in itsourcecode Farm Management System version 1.0, which originates from SQL injection of parameters pigno/weight/arrived/breed/remark/status...

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is an open source PHP and MySQL based hospital management system from PHPGurukul. A security vulnerability exists in PHPGurukul Hospital Management System version 4.0, which originates from multiple cross-site scripting vulnerabilities in the docname paramete...

CVE-2024-10191

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-details.php of the component Booking Details Page. The manipulation of the argument Official Remark leads to cross site scripting. It is...

PHPGurukul Boat Booking System 安全漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System that originates from a cross-site scripting vulnerability in the Official Remark parameter in the /admin/book-details.php page of the Booki...

CVE-2024-10191: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-details.php of the component Booking Details Page. The manipulation of the argument Official Remark leads to cross site scripting. It is...

PT-2024-16104 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A problematic vulnerability was found in the PHPGurukul Boat Booking System. This issue affects the /admin/book-details.php file of the Booking Details Page component. The manipulation o...