CVE-2025-8498

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

Code-Projects Online Medicine Guide 注入漏洞

Code-Projects Online Medicine Guide is a Code-Projects open source online medicine guide. An injection vulnerability exists in Code-Projects Online Medicine Guide version 1.0, which originates from a SQL injection due to a mishandling of the parameter uname in the file /cart/index.php...

CVE-2025-8498: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

Code-Projects Online Medicine Guide 注入漏洞

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter uname in the file /cussignup.php. The vulnerability can be exploited to execute illegal S...

CVE-2025-8443: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-8442: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cussignup.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The...

Online Appointment Booking System cover.php file SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. The Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uname/psw in the file /cover.php. The...

CVE-2025-7587: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cover.php. The manipulation of the argument uname/psw leads to sql injection. The attack may be launched remotely. The...

CVE-2025-7147: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The...

CodeAstro Patient Record Management System 注入漏洞

CodeAstro Patient Record Management System is a patient record management system from CodeAstro. An injection vulnerability exists in CodeAstro Patient Record Management System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter uname in the file /login.ph...

CVE-2025-6917

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6917: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6906: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-9088

A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This vulnerability affects the function login. The manipulation of the argument uname leads to buffer overflow. The exploit has been disclosed to the public and may be used...

CVE-2025-3728

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...

CVE-2025-3728: Buffer Copy without Checking Size of Input

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed...

SourceCodester Simple Hotel Booking System 安全漏洞

SourceCodester Simple Hotel Booking System is a SourceCodester open source simple hotel booking system. A security vulnerability exists in SourceCodester Simple Hotel Booking System version 1.0, which is caused by a buffer overflow due to incorrect manipulation of the uname parameter in the Login...

CVE-2020-6138

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability...

PT-2025-3956 · Unknown · Code-Projects Fantasy-Cricket

Name of the Vulnerable Software and Affected Versions: code-projects Fantasy-Cricket version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the uname argument in an unknown function of the file /dash/update.php. This can be exploited...

PT-2025-3957 · Unknown · Code-Projects Fantasy-Cricket

Name of the Vulnerable Software and Affected Versions: code-projects Fantasy-Cricket version 1.0 Description: A critical issue has been found in the code-projects Fantasy-Cricket software. The vulnerability is a remote SQL injection in the /authenticate.php file, which can be exploited by...