6119 matches found
CVE-2025-63443
School Management System PHP v1.0 is vulnerable to Cross Site Scripting XSS in /login.php via the password parameter...
CVE-2025-12610
CVE-2025-12610 affects CodeAstro Gym Management System 1.0, with a SQL injection in the /admin/view-progress-report.php file. The vulnerability arises from manipulated the ID parameter, potentially enabling remote exploitation. Public disclosures exist for the exploit. Affected component is the v...
📄 HTMLDOC 1.9.13 Stack Buffer Overflow
HTMLDOC versions 1.9.13 and below proof of concept exploit that demonstrates a stack buffer overflow vulnerability. !/usr/bin/env python3 Exploit Title: HTMLDOC 1.9.13 - Stack Buffer Overflow Google Dork: N/A Date: 2025-08-26 Exploit Author: wulfgarpro Vendor Homepage:...
CVE-2025-63450
Car-Booking-System-PHP v.1.0 is vulnerable to Cross Site Scripting XSS in /carlux/booking.php...
CVE-2025-63451
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...
Water-Management-System 安全漏洞
Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which originates from cross-site scripting in the file /addvendor.php...
CVE-2025-63446
Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php. Root cause details are not fully disclosed beyond the endpoint name; CVSS v3.1 base score 6.1 (AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:N). Exploitation is mentioned as PoC in one source, but exploitable ...
itsourcecode Online Loan Management System 安全漏洞
itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A security vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from an incorrect manipulation of the parameter ID in the file /managepayment.php...
CarLux 安全漏洞
CarLux is a car booking system by the individual developer AKSHIT SONANI. A security vulnerability exists in CarLux version 1.0, which originates from a SQL injection vulnerability in the file /carlux/sign-in.php...
school-management-system 安全漏洞
school-management-system is a PHP school management system for schools or small organizations developed by Shubham kumar, an individual developer. A security vulnerability exists in school-management-system version 1.0, which stems from an unvalidated parameter password in /login.php, which could...
CarLux 安全漏洞
CarLux is a car booking system by the individual developer AKSHIT SONANI. A security vulnerability exists in CarLux version 1.0, which stems from the file /carlux/booking.php being vulnerable to cross-site scripting attacks...
CVE-2025-63452
CVE-2025-63452 affects Car-Booking-System-PHP v1.0 and is due to a SQL Injection in the /carlux/forgot-pass.php endpoint. The vulnerability stems from insufficient input validation on user-supplied data used in SQL queries, as indicated by multiple sources. The CVSSv3.1 base score is 9.4 (CRITICA...
CVE-2025-63451
CVE-2025-63451 affects Car-Booking-System-PHP v1.0 vulnerable via SQL Injection in /carlux/sign-in.php due to insufficient input validation. Underlying flaw enables unauthorized data access/manipulation with high impact across confidentiality, integrity, and availability (CVSS 3.1: 9.8). Evidence...
CVE-2025-63446
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addvendor.php...
CarLux 安全漏洞
CarLux is a car booking system by the individual developer AKSHIT SONANI. A security vulnerability exists in CarLux version 1.0, which originates from a SQL injection vulnerability in the file /carlux/contact.php...
CVE-2025-63447
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...
CVE-2025-63443
CVE-2025-63443 affects School Management System PHP v1.0. The vulnerability is a Cross-Site Scripting (XSS) in the login form, exploitable via the unvalidated/unsanitized password parameter sent to /login.php . The referenced sources consistently describe the issue as an XSS condition stemming fr...
PT-2025-44747
Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A weakness exists in the software that allows for SQL injection. The issue is located in the delete payment function within the /admin class.php file. Manipulation of t...
