340 matches found
PHPGurukul COVID19 Testing Management System 代码注入漏洞
The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a code injection vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter q in file...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from NFSv4 releasing resources even after canceling an open RPC call resulting in post-release reuse...
PHPGurukul Teacher Subject Allocation Management System 注入漏洞
Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter editid in fi...
PT-2025-23837 · Unknown · Campcodes Online Hospital Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Hospital Management System version 1.0 Description: A critical vulnerability was found in the Campcodes Hospital Management System. The issue affects an unknown function of the file /admin/registration.php. The manipulation of the...
CVE-2024-7274
A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of the file /reservationstatus.php. The manipulation of the argument rcode leads to sql injection. The attack may be initiated remotely. The...
CVE-2022-28023
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...
CVE-2022-43051
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=deletetest...
CVE-2022-36636
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-31975
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser=...
SAP supplier relationship management information leakage vulnerability
SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An information disclosure vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component, and can be exploited by an attacker...
itsourcecode Sales and Inventory System 注入漏洞
itsourcecode Sales and Inventory System is itsourcecode open source a sales and inventory system . An injection vulnerability exists in itsourcecode Sales and Inventory System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter serial in the file...
PT-2025-21636 · Unknown · Phpgurukul Park Ticketing Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A critical issue has been found in the PHPGurukul Park Ticketing Management System, affecting the processing of the file /view-normal-ticket.php. The manipulation of the...
CVE-2025-46188
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...
PT-2025-18961 · Unknown · Sourcecodester Simple To-Do List System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple To-Do List System. The issue affects an unknown function of the file /delete task.php. The manipulation of the ID...
CVE-2025-45010
A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters...
CVE-2025-44192
SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangaymanagement/admin/?page=viewclearance...
PT-2025-18178 · Unknown · Simple Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: Simple Movie Ticket Booking System version 1.0 Description: A critical vulnerability was found in the Simple Movie Ticket Booking System. The issue affects the changeprize function, where manipulation of the prize argument leads to a...
Sourcecodester Online ID Generator System 安全漏洞
Sourcecodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in version 1.0 of the Sourcecodester Online ID Generator System, which stems from allowing the upload of arbitrary files and could lead to the executio...
CVE-2025-29018
A Stored Cross-Site Scripting XSS vulnerability exists in the name parameter of pagesaddacctype.php in Code Astro Internet Banking System 2.0.0...
PT-2025-15062 · Unknown · Phpgurukul Men Salon Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical issue was found in the PHPGurukul Men Salon Management System, affecting some unknown functionality of the file /appointment.php. The manipulation of the Name argument...