CVE-2025-0402

A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument file leads to unrestricted upload. The attack can be...

Code-Projects Online Car Rental System 安全漏洞

Code-Projects Online Car Rental System is an open source car rental system from Code-Projects. A security vulnerability exists in Code-Projects Online Car Rental System version 1.0, which stems from a file upload feature that does not validate file extensions or MIME types, allowing an attacker t...

gymxmjpa 安全漏洞

gymxmjpa is a gym management system for liujianview individual developers. A security vulnerability exists in gymxmjpa version 1.0, which originates from an SQL injection contained in the hyname parameter of the MenberDaoInpl function in the...

BigId PrivacyPortal 安全漏洞

BigId PrivacyPortal is a data security and privacy tool from BigId, Inc. A security vulnerability exists in BigId PrivacyPortal version v179 that stems from a cross-site scripting XSS attack on the Label field in the Report Template feature...

PT-2025-3874 · Reggie · Reggie

Name of the Vulnerable Software and Affected Versions: 1902756969 reggie version 1.0 Description: A problem has been found in the Phone Number Validation Handler component, affecting some unknown functionality of the file /user/sendMsg. The manipulation of the code argument leads to information...

reggie 路径遍历漏洞

reggie is a takeaway website by 1902756969 individual developers. A path traversal vulnerability exists in reggie version 1.0, which stems from a path traversal in the parameter name...

CVE-2024-57686

A Cross Site Scripting XSS vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter...

PHPGurukul Land Record System 安全漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Land Record System version 1.0, which originates from an operating system command injection vulnerability that allows remote attackers to execute arbitrary code via a cooki...

CVE-2024-13194

A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/adminmembers.php?ac=search. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed t...

cy-fast 注入漏洞

cy-fast is a SpringBoot based rapid development framework by chenyi personal developer. An injection vulnerability exists in cy-fast version 1.0, which is caused by SQL injection in the parameter order...

Code-Projects Online Bike Rental System 代码问题漏洞

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

E-Commerce-PHP 安全漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. A security vulnerability exists in E-Commerce-PHP version 1.0 that stems from vulnerability to cross-site request forgery attacks...

E-Commerce-PHP 代码注入漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. A code injection vulnerability exists in E-Commerce-PHP version 1.0, which stems from the parameter Name in the file /admin/createproduct.php can lead to cross-site scripting attacks...

PT-2025-2058 · Wander Chu · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: wander-chu SpringBoot-Blog version 1.0 Description: A critical vulnerability was found in the HTTP POST Request Handler component, specifically affecting the preHandle function of the BaseInterceptor.java file. This leads to improper access...

PT-2025-2059 · Wander Chu · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: wander-chu SpringBoot-Blog version 1.0 Description: A critical vulnerability has been found in the Admin Attachment Handler component, specifically affecting the upload function of the AttachtController.java file. The manipulation of the file...

Sucms 安全漏洞

Sucms is a completely open source and free PHP+MYSQL system by China Subianji team. A security vulnerability exists in Sucms version 1.0, which originates from the parameter uid in the file /admin/adminmembers.php?ac=search that can lead to SQL injection...

PT-2025-3835 · Code Projects · Cinema Seat Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Cinema Seat Reservation System version 1.0 Description: A critical issue has been found in the Cinema Seat Reservation System. It affects an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the id...

PT-2025-3841 · Unknown · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Content Management System version 1.0 Description: A critical issue has been found in the code-projects Content Management System. It affects an unknown part of the file /admin/publishnews.php of the component Publish News Page...

Minidlna 命令注入漏洞

Minidlna is a suite of media server software. A security vulnerability exists in Minidlna v1.3.3 and earlier versions, which stems from the presence of command injection that allows an attacker to execute arbitrary operating system commands via a specially crafted minidlna.conf configuration file...

WordPress Genesis Style Shortcodes Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Genesis Style Shortcodes versions = 1.0...