Lucene search
K

24 matches found

CNVD
CNVD
added 2025/11/20 12:0 a.m.3 views

Complaint Management System subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of the subcategory and category parameters in subcategory.php against externally entered SQL statements. The vulnerability ca...

6.5CVSS8.3AI score0.00037EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.4 views

CVE-2024-44658

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...

6.5CVSS8AI score0.00037EPSS
Exploits1References1
OSV
OSV
added 2025/11/17 7:16 p.m.1 views

CVE-2024-44658

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...

6.5CVSS5.8AI score0.00037EPSS
Exploits1References2
CVE
CVE
added 2025/11/17 12:0 a.m.4 views

CVE-2024-44658

CVE-2024-44658 affects PHPGurukul Complaint Management System 2.0, due to a SQL Injection flaw in subcategory.php exposed through the subcategory and category parameters. The root cause is lack of input validation for externally supplied SQL statements, enabling attackers to manipulate queries an...

6.5CVSS7.6AI score0.00037EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.2 views

CVE-2024-44658

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...

7.6AI score0.00037EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.4 views

CVE-2024-44658

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php...

0.00037EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.2 views

PT-2025-47194

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The PHPGurukul Complaint Management System version 2.0 contains a SQL Injection flaw. This flaw is present in the subcategory.php file and affects the subcategory and category...

6.5CVSS7.5AI score0.00037EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-5770

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00113EPSS
Exploits0References2
CNVD
CNVD
added 2025/09/05 12:0 a.m.2 views

Complaint Management System in PHP subcategory.php file cross-site scripting vulnerability

Complaint Management System in PHP is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System in PHP, which stems from the lack of effective filtering and escaping of user-supplied data in the categoryName parameter of admin/subcategory.php, for...

7.2CVSS6.3AI score0.0017EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

Complaint Management System /admin/edit-subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter subcategory in the file /admin/edit-subcategory.php. An attacker can...

8.8CVSS8.2AI score0.00181EPSS
Exploits1References1
OSV
OSV
added 2025/06/05 11:15 a.m.1 views

CVE-2025-5655

A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument subcategory leads to sql injection. It is possible to initiate the attack remotely. T...

8.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.1 views

PHPGurukul Complaint Management System 注入漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter subcategory in the file /admin/edit-subcategory.php. An attacker can...

8.8CVSS8.1AI score0.00181EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/05/22 8:55 p.m.2 views

CVE-2021-37808

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the 1 category, 2 subcategory, 3 sucatdescription, and 4 username parameters, the server response is about N seconds delay respectively which mean it is vulnerable to MySQL Blind Time Based. An attacker can...

5.9CVSS6.3AI score0.0116EPSS
Exploits1References1
OSV
OSV
added 2025/03/03 1:15 p.m.0 views

CVE-2025-1871

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

9.8CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 12:50 p.m.9 views

CVE-2025-1871 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php...

9.3CVSS8AI score0.00113EPSS
Exploits0References1
OSV
OSV
added 2021/10/27 5:15 p.m.16 views

CVE-2021-37808

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the 1 category, 2 subcategory, 3 sucatdescription, and 4 username parameters, the server response is about N seconds delay respectively which mean it is vulnerable to MySQL Blind Time Based. An attacker can...

5.9CVSS5.8AI score0.0116EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2021/10/27 12:0 a.m.3 views

PT-2021-21878 · Unknown · News Portal Project

Name of the Vulnerable Software and Affected Versions: News Portal Project version 3.1 Description: SQL Injection vulnerabilities exist in the News Portal Project via the category, subcategory, sucatdescription, and username parameters. The server response is delayed by about N seconds, indicatin...

5.9CVSS6.8AI score0.0116EPSS
Exploits1References5
CNVD
CNVD
added 2017/11/01 12:0 a.m.0 views

MyBuilder Clone SQL Injection Vulnerability

MyBuilder Clone is an e-commerce website building system. A SQL injection vulnerability exists in MyBuilder Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'subcategory' parameter to the phpsqlsearchgenxml.php file to inject SQL commands...

9.8CVSS8.1AI score0.02342EPSS
Exploits4References1
0day.today
0day.today
added 2017/10/31 12:0 a.m.23 views

MyBuilder Clone 1.0 - subcategory SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBuilder Clone 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.contractorscripts.com/ Software Link: http://order.contractorscripts.com/ Demo: http://demo.contractorscripts.com/ Version: 1.0 Category:...

7.5CVSS9.7AI score0.02342EPSS
Exploits4
exploitpack
exploitpack
added 2017/10/30 12:0 a.m.11 views

MyBuilder Clone 1.0 - subcategory SQL Injection

MyBuilder Clone 1.0 - subcategory SQL Injection Exploit Title: MyBuilder Clone 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.contractorscripts.com/ Software Link: http://order.contractorscripts.com/ Demo: http://demo.contractorscripts.com/ Version: 1.0 Category: Webap...

7.5CVSS10AI score0.02342EPSS
Exploits4
Rows per page
Query Builder