CVE-2025-8471

CVE-2025-8471 SQL Injection PoC Author : Byte Reaper CVE : CVE-2025-8471 Vulnerability : SQL Injection in “projectworlds Online Admission System v1.0” Description : A blind SQL injection exists in adminlogin.php?aid=. This PoC sends a series of GET requests with various payloads—both two-stage...

CVE-2025-8471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of the file /adminlogin.php. The manipulation of the argument aid leads to sql injection. The attack may be initiated remotely. The exploit ha...

Projectworlds Online Admission System 注入漏洞

Projectworlds Online Admission System is an online admission system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Admission System version 1.0, which stems from an incorrect manipulation of the parameter aid in the file /adminlogin.php resulting in SQL...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-13322: Improper Neutralization of Special Elements used in an SQL Command

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection within the index.php file. The vulnerability is triggered via the 'a_id' parameter, potentially allowing for unauthorized exploitation of the database. To mitigate this risk, it is recommended to restrict access to the 'a_id'...

CVE-2024-51060: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVEs

CVE-2024-51060: SQL Injection in Projectworlds Online Admissio...

Vkflash image rotation management system A_ID parameter has SQL injection vulnerability

Vkflash Picture Rotation Management System is a set of Flash picture rotation management system based on RuoChi's Bcastr processing and secondary development. Vkflash Image Rotation Management System has a SQL injection vulnerability in the AID parameter, which can be exploited by attackers to...