CVE-2025-7481

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /users/profile.php. The manipulation of the argument firstname leads to sql injection. It is possible to initiate the attack remotely. The...

PHPGurukul Vehicle Parking Management System injection vulnerability

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter email in the file /users/forgot-password.php that lacks validation of externally entered SQL statements. An...

Code-Projects Simple Car Rental System Injection Vulnerabilities

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

CampCodes Online Movie Theater Seat Reservation: Injection Vulnerability

CampCodes Online Movie Theater Seat Reservation is an online theater seat reservation system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Movie Theater Seat Reservation version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ...

CampCodes Online Movie Theater Seat Reservation: Injection Vulnerability

CampCodes Online Movie Theater Seat Reservation is an online theater seat reservation system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Movie Theater Seat Reservation version 1.0, which stems from a parameter ID manipulation leading to SQL injection...

CampCodes Online Recruitment Management System has security vulnerabilities

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Online Recruitment Management System version 1.0, which originates from a parameter ID operation leading to SQL injection...

CampCodes Online Movie Theater Seat Reservation: Injection Vulnerability

CampCodes Online Movie Theater Seat Reservation is an online theater seat reservation system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Movie Theater Seat Reservation version 1.0, which stems from a parameter mid operation resulting in SQL injection...

VulnCheck KEV: CVE-2025-25257

Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests...

CVE-2025-53549 Matrix Rust SDK allows SQL injection in the EventCache implementation

The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that...

CampCodes Payroll Management System Injection Vulnerability

CampCodes Payroll Management System is a payroll management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Payroll Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter ID in file/ajax.php...

CVE-2025-7191

A vulnerability has been found in code-projects Student Enrollment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-47178

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network...

Code-Projects Library System Injection Vulnerabilities

Library System is a library system. The Library System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /add-teacher.php. An attacker can exploit this vulnerability to execute illega...

Ivanti Endpoint Manager SQL Injection Vulnerability

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. Ivanti Endpoint Manager suffers from a SQL injection vulnerability that originates from improperly filtered submitted SQL statements, which can be...

Quiter Gateway SQL Injection Vulnerability

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from an SQL injection in the pagina.filter.categoria parameter, which could lead to database manipulation...

PHPGurukul Zoo Management System Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/manage-animals.php. An attacker can exploit this vulnerability...

CampCodes Sales and Inventory System Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in Campcodes Sales and Inventory System version 1.0, which stems from improper manipulation of the parameter Customer in the file /pages/customeraccount.php, which could lea...

Code-Projects Library System Injection Vulnerabilities

Library System is a library system. The Library System suffers from an SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter Search in the file /user/teacher/books.php. An attacker can exploit this vulnerability to execute...

ABIS Adjutant Core Accounting ERP security vulnerabilities

ABIS Adjutant Core Accounting ERP is an enterprise resource planning software system from ABIS Corporation. A security vulnerability exists in ABIS Adjutant Core Accounting ERP build v.PreBeta250F, which stems from the cid parameter in a GET request that is vulnerable to SQL injection attacks,...

Microsoft Configuration Manager SQL injection vulnerability

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up to date, set configuration and security policies, and monitor system status. A SQL injection vulnerability exists in Microsoft Configuration...