CVE-2023-41520

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

CVE-2023-41521

CVE-2023-41521 affects Student Attendance Management System v1, which contains multiple SQL injection flaws in createSessionTerm.php reachable via the id, termId, and sessionName parameters. The reported impact is severe (CVSS v3.1 base score 8.8, high confidentiality, integrity, and availability...

Wanzhou WOES Intelligent Optimization Energy Saving System 注入漏洞

Wanzhou WOES Intelligent Optimization Energy Saving System is an Intelligent Optimization Energy Saving System from the Chinese company Wanzhou. An injection vulnerability exists in version 1.0 of the Wanzhou WOES Intelligent Optimization Energy Saving System, which originates from SQL injection...

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a SQL injection due to incorrect manipulation of the username parameter in the fi...

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy. A security vulnerability exists in Student Attendance Management System v1. The vulnerability stems from SQL injection due to incorrect manipulation of the classId and classArmName parameters in th...

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1. The vulnerability stems from SQL injection due to incorrect manipulation of the parameters id, termI...

Code-Projects Intern Membership Management System 注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. An injection vulnerability exists in Code-Projects Intern Membership Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

Code-Projects Online Medicine Guide 注入漏洞

Code-Projects Online Medicine Guide is a Code-Projects open source online medicine guide. An injection vulnerability exists in Code-Projects Online Medicine Guide version 1.0, which stems from a SQL injection due to the incorrect operation of the parameter ups in the file /changepass.php...

Code-Projects Online Movie Streaming 安全漏洞

Code-Projects Online Movie Streaming is an online movie streaming software from Code-Projects open source. A security vulnerability exists in Code-Projects Online Movie Streaming version 1.0, which stems from a lack of authorization due to incorrect manipulation of the parameter ID in the file...

Institute-of-Current-Students 安全漏洞

Institute-of-Current-Students is a school management website by the individual developer Vishal Mathur. A security vulnerability exists in version 1.0 of Institute-of-Current-Students, which stems from insufficient cleanup of the Query and Answer input fields in the file querydetails.php, which...

PHPGurukul Boat Booking System 注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which stems from SQL injection due to incorrect manipulation of the parameter boatname in the file /admin/add-boat.php...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

firefox: thunderbird: Memory safety bugs

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs are present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140, and Thunderbird 140. Some...

Campcodes Online Hotel Reservation System 注入漏洞

CampCodes Online Hotel Reservation System is an online hotel reservation system from CampCodes Philippines. Campcodes Online Hotel Reservation System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to misuse of the username/password parameters in the...

CVE-2025-8217 Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

Campcodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which is caused by an incorrect manipulation of the parameter ID in the file /admin/ajax.p...

code-projects Simple Car Rental System 安全漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in code-projects Simple Car Rental System version 1.0, which stems from vulnerability to cross-site request forgery attacks...

Code-Projects Vehicle Management 注入漏洞

Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...

PuneethReddyHc Online Shopping System Advanced 安全漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHc Online Shopping System Advanced version 1.0, which stems from improper cleaning of the keyword...