11968 matches found
CVE-2025-4716 Campcodes Sales and Inventory System credit_transaction_add.php sql injection
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/credittransactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be launched...
CVE-2025-4711
A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/stockinadd.php. The manipulation of the argument prodname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...
CVE-2025-4707
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The explo...
CVE-2025-4702
A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/add-category.php. The manipulation of the argument catename leads to sql injection. It is possible to launch the attack remotely. T...
CVE-2025-44181
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/add-brand.php via the brandname parameter...
CVE-2025-4695
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add-users.php. The manipulation of the argument uadd leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2025-4695 PHPGurukul/Campcodes Cyber Cafe Management System add-users.php sql injection
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add-users.php. The manipulation of the argument uadd leads to sql injection. It is possible to launch the attack remotely. The explo...
PT-2025-21277
Name of the Vulnerable Software and Affected Versions: PHPGurukul Cyber Cafe Management System version 1.0 Description: A critical issue was found in the PHPGurukul Cyber Cafe Management System. The problem affects an unknown function of the file /add-users.php. The manipulation of the uadd...
PHPGurukul Vehicle Record Management System 安全漏洞
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the brandname parameter of /admin/add-brand.php, which c...
CampCodes Sales and Inventory System 安全漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. A security vulnerability exists in CampCodes Sales and Inventory System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter prodname in the file...
PHPGurukul Vehicle Parking Management System 注入漏洞
PHPGurukul Vehicle Parking Management System is a parking management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Vehicle Parking Management System version 1.13, which results from SQL injection due to incorrect manipulation of the parameter catename in the file...
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Sales and Inventory System, which stems from SQL injection due to incorrect manipulation of the parameter discount in the file...
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from an incorrect manipulation of the parameter prodname in the file /pages/transactionadd.php that results ...
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter last in the file /pages/customeradd.php...
CVE-2025-44181
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/add-brand.php via the brandname parameter...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the addcamera API. An attacker with admin credentials can execute arbitrary commands within a non-interactive shell environment by constructing a malicious device path. This is only exploitable if the attacker has...
Art Gallery Management System /admin/add-art-type.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter arttype in the file /admin/add-art-type.php against an externally entered SQL statement. An...
Student Record System add-subject.php File SQL Injection Vulnerability
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in parameter sub1 in file /add-subject.php. An attacker can exploit this vulnerability to execute...
Art Gallery Management System /admin/add-art-medium.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter artmed in the file /admin/add-art-medium.php. An attacker c...
Student Record System add-course.php File SQL Injection Vulnerability
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter course-short in the file /add-course.php. An attacker can exploit this vulnerability to...