CVE-2025-11505

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availab...

CVE-2025-11505

PHPGurukul Beauty Parlour Management System 1.1 is affected by a SQL injection in /admin/new-appointment.php via the delid parameter. Exploitation appears remotely and publicly available; multiple sources (CNVD, RH, CNNVD, CVE records, PT-2025-41310) describe the issue and indicate no current pub...

PT-2025-41310

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System version 1.1, specifically within the file /admin/new-appointment.php. Manipulation of the delid argument can lead ...

CVE-2025-11505: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availab...

CVE-2025-8115: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument registrationnumber/licensenumber leads to cros...

CVE-2025-7562

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PHPGurukul Online Fire Reporting System security vulnerabilities

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/new-requests.php. An attacker ca...

CVE-2025-7562: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

Credit Card Application Management System Cross-Site Scripting Vulnerability

Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file...

CVE-2025-4939: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0. This vulnerability affects unknown code of the file /admin/new-ccapplication.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2025-4917: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads to sql injection. It is possible to launch the attack...

CVE-2023-34845: Unrestricted Upload of File with Dangerous Type

Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the...

Bludit code issues and vulnerabilities

Bludit is an open source lightweight blog content management system CMS. A code issue vulnerability exists in Bludit v3.14.1, which stems from an arbitrary file upload vulnerability in the component /admin/new-content that allows an attacker to execute arbitrary web script or HTML by uploading a...

PT-2023-25030 · Bludit · Bludit

Name of the Vulnerable Software and Affected Versions: Bludit version 3.14.1 Description: The issue allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file in the /admin/new-content component. This is possible due to an arbitrary file upload vulnerability. It's...

PT-2022-13987

Name of the Vulnerable Software and Affected Versions Bludit version 3.13.1 Description A vulnerability was found in the New Content module, specifically affecting the endpoint "/admin/new-content". The issue arises from the manipulation of the content argument with malicious input, such as alert...

Bludit cross-site scripting vulnerabilities

Bludit CMS is an open source lightweight blog content management system CMS. v3.13.1 of Bludit CMS contains a cross-site scripting vulnerability that originates from the lack of filtering and validation of user input data on the /admin/new-content page. An attacker could use this vulnerability to...

CVE-2022-1590: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input leads to cross site scripting. The attack can be initiated remotely but...

CVE-2021-25197

Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...

PT-2019-9540

Name of the Vulnerable Software and Affected Versions LayerBB versions prior to 1.1.3 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to perform unauthorized actions such as adding a user via "admin/new user.php", deleting a user via...

Bus Booking Script admin/new_master.php file cross-site request forgery vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Bus Booking Script. A remote attacker can exploit this vulnerability to perform unauthorized operations via the admin/newmaster.php file...