CVE-2022-45758

SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...

CVE-2022-45328

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...

CVE-2022-28110

Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page...

CVE-2022-44413

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/managemechanic.php?id=...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-43350

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deleteinquiry...

CVE-2022-43353

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

CVE-2022-25004

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...

CVE-2022-43127

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

Kelixun Communication Command and Dispatch Management Platform 命令注入漏洞

Kelixun Communication Command and Dispatch Management Platform Kelixun is a communication command and dispatch management platform from Kelixun, China. A command injection vulnerability exists in Kelixun Communication Command and Dispatch Management Platform version 1.0, which originates from os...

PHPGurukul Student Management System 安全漏洞

PHPGurukul Student Management System is a student management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Student Management System v1, which originates from an SQL injection in the emailid and id parameters in /studentrecordms/password-recovery.php...

PT-2025-54: Business Logic Errors in FreeScout

The vulnerability was identified in FreeScout , versions v.1.8.173 and 1.8.174. The discovered vulnerability allows an attacker to gain access to a functional capability without completing the required sequence of actions, bypassing the intended business workflow. Vulnerability status: Confirmed ...

PHPGurukul Student Management System 安全漏洞

PHPGurukul Student Management System is a student management system from PHPGurukul Inc. A security vulnerability exists in the v1 version of the PHPGurukul Student Management System, which originates from a SQL injection of the username and password parameters in /studentrecordms/login.php...

PHPGurukul Restaurant Table Booking System 安全漏洞

PHPGurukul Restaurant Table Booking System is a restaurant table booking system from PHPGurukul. A security vulnerability exists in PHPGurukul Restaurant Table Booking System v1.0, which originates from a SQL injection in the searchdata parameter in /rtbs/check-status.php...

PHPGurukul Medical Card Generation System 安全漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Medical Card Generation System, which is caused by a stored cross-site scripting attack in the pagetitle, pagedes, and email...

CVE-2022-43354

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...

CVE-2022-24221

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php...

CVE-2022-24219

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/editpage.php...

CVE-2022-24124

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations...