CVE-2025-8229

A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcellist.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-8228

A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function getPages of the file /cms/collect/getPages. The manipulation of the argument targetUrl leads to server-side request forgery. The attack may be launched remotely. Th...

CVE-2025-8134

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...

PT-2025-31003 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System version 1.0. The vulnerability is a SQL injection that occurs through the manipulation of the s argument in the /parce...

PT-2025-31013 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists due to SQL injection. The manipulation of the credits argument in the processing of the file /admin/update s1.php can lead to exploitation. The attack can be...

PT-2025-31014 · Code Projects · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is due to a SQL injection flaw in the /admin/update s2.php file. Manipulation of the credits...

PT-2025-31000 · Yanyutao0402 · Chancms

Name of the Vulnerable Software and Affected Versions: yanyutao0402 ChanCMS versions through 3.1.2 Description: A vulnerability exists in yanyutao0402 ChanCMS that may lead to information disclosure. The issue is related to the manipulation of the accessKey/secretKey arguments within an unknown...

PT-2025-31009 · Code Projects · Code-Projects Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System. The vulnerability is due to SQL injection in the /admin/product.php file. The Name argument is susceptible to...

CVE-2025-8205

A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP DNS Leakage Detector. The manipulation leads to cleartext transmission of sensitive information. The attack may be...

CVE-2025-8190 Campcodes Courier Management System print_pdets.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the file /printpdets.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-8187

A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /editparcel.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2025-8184

A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formSetWanL2TPcallback of the file /goform/formSetWanL2TPtriggers of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be...

CVE-2025-8175

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument shareenable leads to null pointer dereference. It is possible to initiate the attack...

PT-2025-30977 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System 1.0 related to SQL injection. The vulnerability is located in the processing of the /print pdets.php file. Manipulatio...

PT-2025-30972 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: ABC Courier Management System version 1.0 Description: A critical issue exists in ABC Courier Management System 1.0. The vulnerability is due to a SQL injection flaw within an unknown function of the file /getbyid.php. Manipulation of the ID...

PT-2025-30959 · Phpgurukul · Phpgurukul Local Services Search Engine Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Local Services Search Engine Management System version 2.1 Description: A critical vulnerability exists in PHPGurukul Local Services Search Engine Management System 2.1. The vulnerability is due to a SQL injection within an unknown...

PT-2025-30976 · Campcodes · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System 1.0. The vulnerability is due to a SQL injection flaw in the /edit user.php file. Manipulation of the ID argument can...

CVE-2025-8170 TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748B20211015. This vulnerability affects the function tcpchecknet of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads to buffer overflow. The attack can be...

CVE-2025-8165

A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approvereservation.php. The manipulation of the argument occasion leads to sql injection. The attack may be initiated remotely. The exploit h...

CVE-2025-8166 code-projects Church Donation System HTTP POST Request index.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...