Lucene search
+L

7272 matches found

Vulnrichment
Vulnrichment
added 2025/04/04 10:31 a.m.15 views

CVE-2025-3240 PHPGurukul Online Fire Reporting System search.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...

7.5CVSS7.6AI score0.00514EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/04 10:31 a.m.71 views

CVE-2025-3240

CVE-2025-3240 affects PHPGurukul Online Fire Reporting System v1.2. The vulnerability resides in the /admin/search.php functionality, where manipulation of the searchdata parameter leads to SQL injection. Exploitation can be conducted remotely and, per multiple reports, the exploit has been discl...

9.8CVSS7.4AI score0.00514EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/04 10:31 a.m.21 views

CVE-2025-3239 PHPGurukul Online Fire Reporting System edit-guard-detail.php sql injection

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely...

7.5CVSS7.7AI score0.00514EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/04 10:31 a.m.53 views

CVE-2025-3239

PHPGurukul Online Fire Reporting System 1.2 is affected by a SQL injection in /admin/edit-guard-detail.php triggered by manipulating the editid parameter. The vulnerability arises from unsafely handling external input, enabling remote attackers to execute arbitrary SQL commands and potentially ac...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/04/04 10:31 a.m.30 views

CVE-2025-3239 PHPGurukul Online Fire Reporting System edit-guard-detail.php sql injection

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely...

7.5CVSS0.00514EPSS
SaveExploits1References5
OSV
OSV
added 2025/04/04 10:15 a.m.11 views

CVE-2025-3238

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS5.8AI score0.00514EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/04/04 10:00 a.m.18 views

CVE-2025-3238 PHPGurukul Online Fire Reporting System search-request.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.7AI score0.00514EPSS
SaveExploits1References5
CVE
CVE
added 2025/04/04 10:00 a.m.90 views

CVE-2025-3238

CVE-2025-3238 affects PHPGurukul Online Fire Reporting System 1.2. an unknown function in /search-request.php is vulnerable to SQL injection via the searchdata parameter. The issue can be triggered remotely, and an exploit has been disclosed publicly. Multiple sources reiterate the same root caus...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/04/04 10:00 a.m.35 views

CVE-2025-3238 PHPGurukul Online Fire Reporting System search-request.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has...

7.5CVSS0.00514EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.7 views

PHPGurukul Online Fire Reporting System 注入漏洞

PHPGurukul Online Fire Reporting System is an online fire reporting system from PHPGurukul Inc. An injection vulnerability exists in version 1.2 of the PHPGurukul Online Fire Reporting System, which stems from the fact that incorrect manipulation of the parameter searchdata can lead to SQL...

9.8CVSS7.9AI score0.00514EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.7 views

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that are missing from the editid parameter of the edit-guard-detail.php file. An...

9.8CVSS7.8AI score0.00514EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/04/04 12:00 a.m.10 views

PT-2025-14880 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been found in the PHPGurukul Online Fire Reporting System. The problem affects some unknown functionality of the file /admin/search.php. The manipulation of...

9.8CVSS7.4AI score0.00514EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2025/04/03 9:30 p.m.21 views

CVE-2025-31553

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows SQL Injection.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a...

9.3CVSS7.4AI score0.00509EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2025/04/03 8:08 p.m.6 views

wildlaw.ca Cross Site Scripting vulnerability OBB-4042181

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/04/03 8:05 p.m.7 views

willitsell.com Cross Site Scripting vulnerability OBB-4042165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Circl
Circl
added 2025/04/03 5:48 p.m.12 views

CVE-2025-29987

creationtimestamp| type| source ---|---|--- 2025-04-03 17:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114275287492006712 2025-04-03 17:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114275287492006712 2025-04-03 19:06:24+00:00| seen|...

8.8CVSS7.9AI score0.00509EPSS
SaveExploits0References5
NVD
NVD
added 2025/04/02 3:15 p.m.28 views

CVE-2024-25051

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system...

7.2CVSS0.00354EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/02 3:15 p.m.7 views

CVE-2024-25051

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system...

7.2CVSS5.8AI score0.00354EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/02 3:15 p.m.5 views

CVE-2024-25051

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system...

7.2CVSS5.8AI score0.00354EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/02 2:57 p.m.12 views

CVE-2024-25051 IBM Jazz Reporting Service insufficient session expiration

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system...

6.6CVSS6.7AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder