Lucene search
+L

23 matches found

CNVD
CNVD
•added 2026/04/10 12:00 a.m.•10 views

News Portal Project add-subcategory.php file SQL injection vulnerability

News Portal Project is a news portal project developed by PHPGurukul. There is an SQL injection vulnerability in News Portal Project. This vulnerability arises from the failure of the/admin/add-subcategory.php file to properly handle the sucatdescription parameter. Currently, no detailed details...

5.8CVSS5.9AI score0.00332EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/09 12:00 a.m.•3 views

CVE-2026-5839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument sucatdescription leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•3 views

CVE-2024-44658: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/30 12:12 a.m.•25 views

CVE-2025-63622

A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection...

9.8CVSS7.3AI score0.00354EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/29 3:15 p.m.•15 views

CVE-2025-63622

A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection...

9.8CVSS0.00354EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/29 12:00 a.m.•3 views

CVE-2025-63622: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection...

9.8CVSS5.7AI score0.00354EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-28441

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00507EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•4 views

CVE-2025-57150: Improper Neutralization of Input During Web Page Generation

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting XSS in admin/subcategory.php via the categoryName parameter...

7.2CVSS5.8AI score0.00621EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•3 views

CVE-2025-5251: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS6.9AI score0.00507EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/22 12:00 a.m.•0 views

CVE-2025-5077: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS6.9AI score0.00514EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/22 12:00 a.m.•2 views

CVE-2025-5078: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now...

9.8CVSS7.1AI score0.00551EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/21 12:00 a.m.•4 views

CVE-2025-5059: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. It is possible to initiate...

7.2CVSS5.2AI score0.00451EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/05 1:58 p.m.•32 views

CVE-2025-1871

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

9.8CVSS8.3AI score0.00421EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•5 views

CVE-2025-1871: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•17 views

Complaint Management System subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter category in the file /admin/subcategory.php that can lead to sql injection. No details of the...

9.8CVSS8.4AI score0.00698EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/05 2:31 p.m.•66 views

CVE-2024-12230

CVE-2024-12230 affects PHPGurukul Complaint Management System 1.0. The vulnerability is a SQL injection in the file /admin/subcategory.php, caused by improper manipulation of the category parameter. The issue is exploitable remotely and an exploit has been disclosed publicly. Multiple connected s...

9.8CVSS7.4AI score0.00698EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•4 views

CVE-2024-12230: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched...

9.8CVSS5.5AI score0.00698EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•23 views

AFFCommerce Shopping Cart 1.1.4 SubCategory.php cl Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•21 views

Easyedit CMS subcategory.php intSubCategoryID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/11/19 12:00 a.m.•18 views

Easyedit CMS - subcategory.php?intSubCategoryID SQL Injection

Easyedit CMS - subcategory.php?intSubCategoryID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues coul...

0.1AI score
SaveExploits0
Rows per page
Query Builder