CampCodes Online Beauty Parlor Management System SQL注入漏洞

CampCodes Online Beauty Parlor Management System is an online beauty parlor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Beauty Parlor Management System version 1.0, which stems from an incorrect manipulation of the parameter name in the...

CVE-2025-8606

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activateplugin and deactivateplugin functions. This makes it possible for attackers to tri...

Fedora 42 : prometheus-podman-exporter (2025-b4003be6a2)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b4003be6a2 advisory. release v1.19.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

CVE-2025-11593 CodeAstro Gym Management System delete-equipment.php sql injection

A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2025-11591 CodeAstro Gym Management System delete-member.php sql injection

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

CampCodes Online Apartment Visitor Management SQL注入漏洞

CampCodes Online Apartment Visitor Management is an online apartment visitor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Apartment Visitor Management version 1.0, which stems from the incorrect manipulation of the parameter email in the...

PT-2025-41575

Name of the Vulnerable Software and Affected Versions code-projects Computer Laboratory System version 1.0 Description The software contains a SQL injection flaw. Successful exploitation allows bypassing login attempts by entering a universal password in the Password field on the login page. The...

CVE-2025-11553

A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit ha...

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-11513

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplierupdate.php. This manipulation of the argument suppid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and...

CVE-2025-60830

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

Code-Projects Student Result Manager 安全漏洞

Code-Projects Student Result Manager is a student result management tool from Code-Projects. A security vulnerability exists in Code-Projects Student Result Manager version 1.0, which stems from an incorrect manipulation of the parameter roll/name/gpa in the file src/students/Database.java, which...

Code-Projects Simple Scheduling System 安全漏洞

Code-Projects Simple Scheduling System is an open source simple scheduling system from Code-Projects. A security vulnerability exists in Code-Projects Simple Scheduling System version 1.0, which stems from the vulnerability of the Subject Description field to cross-site scripting attacks...

CVE-2025-60316

CVE-2025-60316 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is an SQL injection in the admin/view_customer.php script via the ID parameter, caused by improper handling of input. Impact includes potential unauthorized data access or modification. Public documents ...

CVE-2025-11513

Summary: CVE-2025-11513 affects the code-projects E-Commerce Website 1.0, specifically the /pages/supplier_update.php file. The vulnerability arises from improper handling of the supp_id parameter, enabling SQL injection. Several connected sources (CNVD, RH, CNNVD, CVE records) describe remote ex...

WordPress Simple Finance Calculator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Simple Finance Calculator versions = 1.0...

CVE-2025-11475

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

CVE-2025-11471

The CVE-2025-11471 entry affects SourceCodester Hotel and Lodge Management System 1.0, specifically the file /edit_customer.php where manipulating the ID parameter enables SQL injection. Root cause: improper handling of user-supplied ID leads to a SQL injection vulnerability. Impact, as described...

SourceCodester Simple E-Commerce Bookstore 安全漏洞

SourceCodester Simple E-Commerce Bookstore is SourceCodester open source a simple e-commerce bookstore. A security vulnerability exists in SourceCodester Simple E-Commerce Bookstore version 1.0, which stems from an incorrect operation of the parameter remove in the file /cart.php, which could lea...