CVE-2025-8973

Summary: CVE-2025-8973 affects SourceCodester Cashier Queuing System 1.0. Affected component: the unknown function in the file /Actions.php where manipulating the Username argument leads to a SQL injection. The vulnerability appears exploitable remotely and has public disclosure. Root cause: impr...

CVE-2025-8971

A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument val-username leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8971

A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument val-username leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8971 itsourcecode Online Tour and Travel Management System travellers.php sql injection

A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument val-username leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8962 code-projects Hostel Management System Login Form hostel_manage.exe stack-based overflow

A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file hostelmanage.exe of the component Login Form. The manipulation of the argument uname leads to stack-based buffer overflow. Local access is required to...

CVE-2025-8962

The CVE-2025-8962 entry affects code-projects Hostel Management System 1.0, specifically the hostel_manage.exe component in the Login Form. The root cause is a stack-based buffer overflow caused by manipulating the uname argument, with local access required for exploitation. Public exploitation h...

CVE-2025-8952

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be...

CVE-2025-8952

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be...

CVE-2025-8952

CVE-2025-8952 affects Campcodes Online Flight Booking Management System 1.0. The vulnerability is in the login component, specifically the unknown functionality of /admin/ajax.php?action=login, where manipulating the Username parameter leads to an SQL injection. It can be executed remotely over t...

CVE-2025-8935

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935

CVE-2025-8935 affects the open-source product “1000 Projects Sales Management System” version 1.0. The vulnerability exists in an unknown functionality of the file /superstore/custcmp.php , where manipulating the Username parameter triggers a SQL injection. The impact is remote exploitation with ...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

PT-2025-33137 · Unknown · Campcodes Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Flight Booking Management System version 1.0. The vulnerability is located in an unknown functionality of the...

1000 Projects Sales Management System has a vulnerability exploited

1000 Projects Sales Management System is an open source sales management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Sales Management System, which is caused by a SQL injection due to incorrect manipulation of the parameter Username in the file...

CVE-2025-8935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8973: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the file /Actions.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

Campcodes Online Flight Booking Management System Injection Vulnerability

CampCodes Online Flight Booking Management System is an online flight booking management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Flight Booking Management System version 1.0, which originates from a SQL injection due to the incorrect operation of t...

Itsourcecode Online Tour and Travel Management System Injection Vulnerability

itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system. An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which originates from a SQL injection due to incorrect...