Dairy Farm Shop Management System /add-product.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter productname in the file...

Dairy Farm Shop Management System /add-company.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter companyname in the file...

CVE-2025-5984

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

CVE-2025-5984

The CVE-2025-5984 entry concerns SourceCodester Online Student Clearance System v1.0. Concrete details across connected documents show a cross-site scripting flaw in the /Admin/add-fee.php script, triggered by manipulating the txtamt parameter. Exploitation is described as remote and publicly dis...

CVE-2025-5984 SourceCodester Online Student Clearance System add-fee.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

CVE-2025-5976

A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/add-pass.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-5976

CVE-2025-5976 affects PHPGurukul Rail Pass Management System 1.0. The vulnerability resides in /admin/add-pass.php where manipulation of the fullname parameter triggers cross-site scripting. Exploitation can be performed remotely, and disclosures exist in multiple sources. Some connected document...

CVE-2025-5973

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-table.php. The manipulation of the argument tableno leads to cross site scripting. The attack can be launched...

CVE-2025-5973 PHPGurukul Restaurant Table Booking System add-table.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-table.php. The manipulation of the argument tableno leads to cross site scripting. The attack can be launched...

CVE-2025-5970

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

CVE-2025-5970

CVE-2025-5970 affects PHPGurukul Restaurant Table Booking System 1.0. The vulnerability is in /admin/add-subadmin.php where manipulating the fullname parameter enables cross-site scripting (XSS). The issue is described as exploitable remotely, with the exploit disclosed publicly. Multiple sources...

CLSA-2025-1749568993 kernel: Fix of 24 CVEs

vsock: Keep the binding until socket destruction CVE-2025-21756 - mt76: fix use-after-free by removing a non-RCU wcid pointer CVE-2022-49328 - bpf, testrun: Fix alignment problem in bpfprogtestrunskb CVE-2022-49840 - ASoC: core: Fix use-after-free in sndsocexit CVE-2022-49842 - net: sched: Fix...

PHPGurukul Restaurant Table Booking System 代码注入漏洞

PHPGurukul Restaurant Table Booking System is a restaurant table booking system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Restaurant Table Booking System, which originates from a cross-site scripting attack due to the incorrect operation of the...

PHPGurukul Restaurant Table Booking System 代码注入漏洞

Restaurant Table Booking System is a restaurant table reservation system. The Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from improper handling of the parameter tableno in the file /admin/add-table.php. An attacker could use this vulnerability to...

PHPGurukul Rail Pass Management System 代码注入漏洞

Rail Pass Management System is a rail pass management system. Rail Pass Management System suffers from a cross-site scripting vulnerability that originates from the manipulation of the parameter fullname in the file /admin/add-pass.php. No details of the vulnerability are available at this time...

OS Command Exec, Add user with useradd

Execute an OS command from PHP. Creates a new user. By default the new user is set with sudo but other options exist to make the new user automatically root but this is not automatically set since the new user will be treated as root and login may be difficult. The new user can also be set as jus...

Cross-site Scripting (XSS)

Overview anchorcms/anchor-cms is a lightweight blog CMS for PHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the "page description" field in the page creation interface /admin/pages/add. An attacker can execute arbitrary JavaScript code by injecting...

CVE-2025-5722

A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /script/academic/terms of the component Add Academic Term. The manipulation of the argument Academic Term leads to cross site...

SourceCodester Student Result Management System 代码注入漏洞

SourceCodester Student Result Management System is SourceCodester open source a student result management system . A code injection vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from the incorrect operation of the file /script/academic/terms...

CVE-2025-5628

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functionality of the file /index.php of the component Add Menu Handler. The manipulation of the argument name/description leads to cross site...