2403 matches found
CVE-2015-9452
The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nexformsId parameter...
CVE-2019-6691
phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup=backup=doback tabledb parameter, related to the "--backup database" option...
CVE-2014-8945
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...
CVE-2019-13339
In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php content box, which can be used to get a user's cookie...
CVE-2018-10121
plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages=editpage=error404 aka Edit 404 page action...
Online Course Registration /admin/department.php File SQL Injection Vulnerability
Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter department in the file /admin/department.php. An attacker can...
Auto Taxi Stand Management System /admin/auto-taxi-entry-detail.php File SQL Injection Vulnerability
Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter price in the file...
Online Course Registration coursecode parameter SQL injection vulnerability
Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter coursecode in the file /admin/course.php. An attacker can...
News Portal /index.php File SQL Injection Vulnerability
News Portal is a news portal. News Portal suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /admin/index.php. An attacker can exploit this vulnerability to execute illegal SQL commands ...
CVE-2025-44880
A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input...
Hexo 安全漏洞
Hexo is a fast, simple and powerful blogging framework by Tommy Chen, a personal developer in China. A security vulnerability exists in Hexo version 4.3.0, which stems from the improper handling of the parameter Description in the file /admin/home/index.html, which could lead to a cross-site...
CVE-2025-4939
A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0. This vulnerability affects unknown code of the file /admin/new-ccapplication.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...
CVE-2025-4936
A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin-page.php. The manipulation of the argument 1price leads to sql injection. It is possible to launch the attack remotely. The exploit ha...
CVE-2025-4915
A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/auto-taxi-entry-detail.php. The manipulation of the argument price leads to sql injection. The attack can be initiated...
Projectworlds Online Food Ordering System 安全漏洞
Projectworlds Online Food Ordering System is an online food ordering system from Projectworlds India. A security vulnerability exists in Projectworlds Online Food Ordering System version 1.0, which originates from an SQL injection due to the operation of parameter 1price in file /admin-page.php...
PHPGurukul Credit Card Application Management System 安全漏洞
Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file...
SourceCodester Doctors Appointment System 注入漏洞
SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...
SourceCodester Stock Management System 安全漏洞
SourceCodester Stock Management System is an open source inventory management system from SourceCodester. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...
PT-2025-21365 · Emlog · Emlog
Name of the Vulnerable Software and Affected Versions: Emlog versions up to and including 2.5.9 Description: The issue occurs due to a SQL injection vulnerability in the $origContent parameter in admin/article save.php, which is not strictly filtered. This allows registered users to access...
