CVE-2025-13280

CVE-2025-13280 affects CodeAstro Simple Inventory System 1.0, specifically the Login component’s /index.php where manipulating the Username parameter enables SQL injection. Multiple connected sources confirm the flaw is exploitable remotely and that exploits have been publicly disclosed. The vuln...

CVE-2025-13276

CVE-2025-13276 affects g33kyrash Online-Banking-System. The vulnerability is a SQL injection in the /index.php file caused by manipulating the Username parameter. It is remotely exploitable and has public exploit code. Version details for affected and updated releases are not available due to rol...

CVE-2025-13276 g33kyrash Online-Banking-System index.php sql injection

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The...

EUVD-2025-197776

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2025-13271

Campcodes School Fees Payment Management System 1.0 is affected by a SQL injection in /ajax.php?action=login, caused by unsafely handling the Username parameter. Multiple connected sources (CNVD-2026-05370, RH:CVE-2025-13271, CNNVD-202511-1928, CVE-2025-13271 listings, and PT-2025-47133) confirm ...

CVE-2025-13267

A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now...

CVE-2025-13241

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2021-4471

TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading...

EUVD-2025-197733

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

PT-2025-47133

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0 that allows for SQL injection. The issue is related to the manipulation of the Username argument withi...

CodeAstro Simple Inventory System SQL注入漏洞

CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...

PT-2025-47198

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal version 2.0 is susceptible to SQL Injection. This issue affects the username parameter within the admin page. Exploitation of this flaw could allow...

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /login.php. An attacker can exploit this vulnerability to execute...

CVE-2024-44652

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of an externally entered SQL statement in the username parameter of the admin page. An attacker can exploit this vulnerability to execute illegal SQL comman...

CampCodes School Fees Payment Management System SQL注入漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter Username in the file...

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

CVE-2024-44662

The CVE-2024-44662 entry applies to PHPGurukul Online Shopping Portal 2.0, where the admin page’s username parameter is vulnerable to SQL Injection. The root cause is lack of input validation/sanitization allowing attacker-supplied SQL to be executed, potentially exposing data. Public references ...

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

PT-2025-47146

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the Username parameter within an unknown function of the /login.php...