22445 matches found
CVE-2025-11056 ProjectsAndPrograms School Management System select-students.php sql injection
A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file ownerpanel/fetch-data/select-students.php. This manipulation of the argument select causes sql injection. Remote exploitation of the attack is possible...
CVE-2025-11056
CVE-2025-11056 affects ProjectsAndPrograms School Management System 1.0. The vulnerability is in the file owner_panel/fetch-data/select-students.php where manipulation of the select parameter causes a SQL injection. Remote exploitation is possible and exploits have been published. Several connect...
CVE-2025-11056 ProjectsAndPrograms School Management System select-students.php sql injection
A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file ownerpanel/fetch-data/select-students.php. This manipulation of the argument select causes sql injection. Remote exploitation of the attack is possible...
CVE-2025-11054 itsourcecode Open Source Job Portal index.php sql injection
A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-11053
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could b...
CVE-2025-11053 PHPGurukul Small CRM forgot-password.php sql injection
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could b...
CVE-2025-11049
A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used...
CVE-2025-11049 Portabilis i-Educar unificacao-aluno improper authorization
A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used...
CVE-2025-11049
Portabilis i-Educar (up to v2.10) contains an improper authorization vulnerability in an unknown functionality of the /unificacao-aluno endpoint. Manipulating this file can lead to unauthorized access with remote exploitation possible; public exploit exists. Affected/component: Portabilis i-Educa...
CVE-2025-11049 Portabilis i-Educar unificacao-aluno improper authorization
A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used...
CVE-2025-11049 Portabilis i-Educar unificacao-aluno improper authorization
A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used...
Portábilis i-Educar 授权问题漏洞
Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. An authorization issue vulnerability exists in Portábilis i-Educar 2.10 and earlier versions, which stems from the fact that manipulation of the file/periodo-lancamento may result in...
PT-2025-39730
Name of the Vulnerable Software and Affected Versions Projectworlds Visitor Management System version 1.0 Description A cross-site scripting issue exists in Projectworlds Visitor Management System version 1.0. The issue is related to the manipulation of the Name argument within an unknown functio...
PT-2025-39707
Name of the Vulnerable Software and Affected Versions Portabilis i-Educar versions up to 2.10 Description A security issue exists in Portabilis i-Educar up to version 2.10 related to improper authorization. The issue is associated with an unknown functionality within the /unificacao-aluno file...
PT-2025-39751
Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal that allows for SQL injection. The issue is located in the file /admin/vacancy/index.php?view=edit, specifically through...
PT-2025-39723
Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System version 1.0 Description A SQL injection issue exists in ProjectsAndPrograms School Management System version 1.0. The issue is located in the owner panel/fetch-data/select-students.php file,...
PT-2025-39732
Name of the Vulnerable Software and Affected Versions westboy CicadasCMS version 1.0 Description A flaw exists in westboy CicadasCMS version 1.0 related to the Add Department Handler component. The issue stems from manipulating the Name argument within the /system/org/save file, leading to cross...
PT-2025-39740
Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A flaw exists in Campcodes Online Learning Management System version 1.0 that allows for SQL injection. The issue is located in the file /admin/edit teacher.php and involves...
CVE-2025-11047
A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argument alunoid causes improper authorization. The attack may be initiated remotely. The exploit has been made available to the public and cou...
CVE-2025-10975
A vulnerability was found in GuanxingLu vlarl up to 31abc0baf53ef8f5db666a1c882e1ea64def2997. This vulnerability affects the function experiments.robot.bridge.reasoningserver::runreasoningserver of the file experiments/robot/bridge/reasoningserver.py of the component ZeroMQ. Performing manipulati...