EUVD-2025-199989

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

PT-2025-48460

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0 Description A SQL injection issue exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application does not properly sanitize user-supplied input used in SQL querie...

Blood Bank Management System security vulnerabilities

Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from a SQL injection issue in the abs.php component that could lead to unauthorized access...

mJobtime security vulnerability

mJobtime is a time tracking and job management software from the US company mJobtime. A security vulnerability exists in mJobtime version v15.7.2 that originates from an unauthenticated attacker being able to execute arbitrary SQL statements via a specially crafted POST request, potentially...

Blood Bank Management System security vulnerabilities

Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from a SQL injection issue in the receiverLogin.php component that could lead to unauthorized access...

CVE-2025-51683

The mJobtime time tracking and job management software (version v15.7.2 ) is vulnerable to a blind SQL Injection (SQLi) . An unauthenticated attacker can execute arbitrary SQL statements by sending a crafted POST request to the /Default.aspx/update_profile_Server endpoint. This vulnerability requ...

CVE-2025-13788

A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-13788

chanjet crm is affected by a SQL injection in /tools/upgradeattribute.php via the gblOrgID parameter. The vulnerability affects Chanjet CRM versions up to 20251106 (pre-51107). Root cause: input manipulation in an unknown function leads to injectable SQL. Impact is high (remote attacker, data exp...

CVE-2025-13770

CVE-2025-13770 affects WebITR by Uniong. A SQL Injection vulnerability allows authenticated remote attackers to inject arbitrary SQL and read database contents. The issue is documented with CVSS v3.1/4.0 bases (6.5 MEDIUM and 7.1 HIGH, respectively). Affected versions are not specified in the sou...

NetworksController addNetworkAction Database Information Disclosure

The vulnerability of the NetworksController.addNetworkAction function in software for remote monitoring with virtual private networks like Advantech WebAccess/VPN is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor...

Advantech iView Management Tool Code Execution

The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of measures taken to protect the SQL query structure during the processing of the searchterm parameter. Exploiting this vulnerability allows a maliciou...

Advantech iView Disclosure Information

The vulnerability of the SNMP management tool for the centralized network device and port management system Advantech iView is related to the lack of measures taken to protect the SQL query structure during parameter processing. Exploiting this vulnerability allows a malicious actor to disclose t...

Advantech iView Management Tool Code Execution

The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of protection for the SQL query structure during the processing of the ztpsearchvalue parameter. Exploiting this vulnerability allows a malicious actor...

PT-2025-48320

Name of the Vulnerable Software and Affected Versions WebITR versions affected versions not specified Description WebITR developed by Uniong has a SQL Injection issue. Authenticated remote attackers can inject arbitrary SQL commands, potentially allowing them to read database contents. The...

EUVD-2025-199829

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8...

CVE-2025-13757

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8...

PT-2025-48270

Name of the Vulnerable Software and Affected Versions Devolutions Server versions through 2025.2.20 and through 2025.3.8 Description Devolutions Server is affected by a SQL Injection issue within the last usage logs functionality. The flaw allows authenticated attackers to potentially steal all...

OxygenOS SQL Injection Information Disclosure

The vulnerability of the OxygenOS operating system in OnePlus 8T and 10 Pro 5G devices lies in the lack of measures to protect the SQL query structure. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

Devolutions Server security vulnerabilities

Devolutions Server is a security solution for managing privileged accounts and sessions, designed to help organizations centrally store and manage sensitive information such as passwords and credentials. Devolutions Server suffers from an SQL injection vulnerability that stems from the...

OpenCode USSD Gateway security vulnerability

OpenCode USSD Gateway is an OpenCode open source gateway software for processing and managing USSD messages. A security vulnerability exists in OpenCode USSD Gateway version 6.13.11, which stems from an SQL injection in the ID parameter of the getSubUsersByProvider function...