Lucene search
K

319 matches found

CNVD
CNVD
added 2025/05/13 12:0 a.m.1 views

Park Ticketing Management System HTML Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from an HTML injection vulnerability that stems from the mishandling of the searchdata parameter in the normal-search.php file, resulting in an HTML injection attack. No details of the...

5.3CVSS7.2AI score0.00213EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.1 views

SourceCodester Apartment Visitor Management System 注入漏洞

SourceCodester Apartment Visitor Management System is a SourceCodester open source apartment visitor management system. SourceCodester Apartment Visitor Management System version 1.0 has an injection vulnerability, the vulnerability stems from the parameter searchdata operation in the file...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References6
CNVD
CNVD
added 2025/05/07 12:0 a.m.1 views

COVID19 Testing Management System /patient-report.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file...

9.8CVSS7.9AI score0.00057EPSS
Exploits1References1
OSV
OSV
added 2025/05/06 1:15 a.m.2 views

CVE-2025-4301

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.8AI score0.00204EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.1 views

itsourcecode Content Management System 安全漏洞

itsourcecode Content Management System is an open source content management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Content Management System, which is caused by an SQL injection due to the manipulation of the searchdata parameter in file...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/03 12:0 a.m.4 views

PHPGurukul Teacher Subject Allocation Management System 注入漏洞

Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System is vulnerable to a SQL injection vulnerability that results from incorrect manipulation of the searchdata parameter in the file /admin/search.php. No detai...

9.8CVSS7.7AI score0.00277EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.1 views

PHPGurukul Blood Bank & Donor Management System 安全漏洞

PHPGurukul Blood Bank & Donor Management System is a blood bank and donor management system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Blood Bank & Donor Management System version 2.4, which results from SQL injection due to incorrect manipulation of the parameter...

9.8CVSS7.7AI score0.00277EPSS
Exploits1References5
OSV
OSV
added 2025/04/30 2:15 p.m.1 views

CVE-2025-45011

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

5.3CVSS6.3AI score0.00231EPSS
Exploits1References1
NVD
NVD
added 2025/04/30 2:15 p.m.9 views

CVE-2025-45011

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

5.3CVSS0.00231EPSS
Exploits1References1
OSV
OSV
added 2025/04/30 2:15 p.m.2 views

CVE-2025-45009

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter...

5.3CVSS6.2AI score
Exploits0References1
Cvelist
Cvelist
added 2025/04/30 12:0 a.m.8 views

CVE-2025-45009

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter...

0.00213EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.1 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from an HTML injection vulnerability that stems from the mishandling of the searchdata parameter in the normal-search.php file, resulting in an HTML injection attack. No details of the...

5.3CVSS7.2AI score0.00213EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.1 views

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System has an HTML injection vulnerability that stems from improper handling of the searchdata parameter in the foreigner-search.php file. No details of the vulnerability are available at this time...

5.3CVSS7.2AI score0.00231EPSS
Exploits1References1
OSV
OSV
added 2025/04/28 7:15 a.m.2 views

CVE-2025-4005

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/04/28 12:0 a.m.1 views

PHPGurukul Rail Pass Management System 安全漏洞

Rail Pass Management System is a rail pass management system. The Rail Pass Management System suffers from a SQL injection vulnerability that occurs when the searchdata parameter in the /admin/search-pass.php file is not properly filtered. An attacker can exploit this vulnerability to obtain...

9.8CVSS7.5AI score0.00206EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/04/28 12:0 a.m.1 views

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file...

9.8CVSS7.9AI score0.00057EPSS
Exploits1References1
OSV
OSV
added 2025/04/19 8:15 p.m.1 views

CVE-2025-3819

A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be...

9.8CVSS5.8AI score0.00206EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/19 12:0 a.m.0 views

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Men Salon Management System, which originates from a SQL injection due to incorrect manipulation of the searchdata parameter in the file...

9.8CVSS7.7AI score0.00206EPSS
Exploits1References5
CNVD
CNVD
added 2025/04/09 12:0 a.m.1 views

e-Diary Management System search-result.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the search-result.php file. An attacker ca...

9.8CVSS8.1AI score0.00192EPSS
Exploits1References1
OSV
OSV
added 2025/04/06 11:15 a.m.2 views

CVE-2025-3316

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS6.9AI score
Exploits0References5
Rows per page
Query Builder