CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP 项目 v1.0 存在通过 SQL 注入导致的远程代码执行（RCE）漏洞。 供应商：https://github.com/mathurvishal/CloudClassroom-PHP-Project 软件链接：https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC 步骤 1：访问受影响的 URL，并通过附加单引号（'）修改 ?viewid=1 参数。执行此操作后，应用程序返回 SQL...

cve-2025-9933

🔒 管理员面板的凭据 用户名: admin 密码: Test@123 用户名: [email protected] 密码: Test@123 或注册新用户。 描述 在 PHPGurukul Beauty Parlour Management System 1.1 中发现一个漏洞。受此影响的是文件 /admin/view-appointment.php 中某些未知功能。对参数 viewid 的篡改导致 SQL 注入。攻击可能远程发起。该利用方式已公开披露，可能被使用。 访问 MySQL（终端） docker compose exec db mysql -uuser -p...

EUVD-2025-210540

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

CVE-2025-69944

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

PT-2026-65912

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-69944

The kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection within the view-medhistory.php endpoint. The vulnerability is triggered via the viewid parameter, allowing for the improper neutralization of special elements used in an SQL command. Exploitation details are not provided...

CVE-2025-69942

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2025-69944

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

PT-2026-65923

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description An issue exists where the software is susceptible to SQL Injection, a technique that allows an attacker to interfere with the queries that an application makes to its database. This...

CVE-2025-69944

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter...

CVE-2025-70063

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference IDOR vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the...

CVE-2025-70063

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference IDOR vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the...

CVE-2025-70063

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference IDOR vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the...

PT-2026-20483

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference IDOR vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the...

PHPGurukul Hospital Management System 安全漏洞

PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL. The PHPGurukul Hospital Management System v4.0 version has a security vulnerability. This vulnerability arises from the Medical History module not verifying the ownership...

CVE-2025-70063

The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference IDOR vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the...

CVE-2023-31936

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

Complete Online Beauty Parlor Management System /view-appointment.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid i...

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

EUVD-2025-204664

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The exploit...