46 matches found
CVE-2025-4550
A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated...
CVE-2025-4550: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated...
PHPGurukul Apartment Visitors Management System 注入漏洞
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from a misbehavior of the parameter pid in the file /admin/pass-details.php that results in SQL injection. An attacker ca...
CVE-2025-4151: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated...
CVE-2025-4074: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack...
CVE-2024-44798: Improper Neutralization of Input During Web Page Generation
phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting XSS in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters...
CVE-2018-18242
youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86...
RSVP Invitation Online 1.0 Cross Site Request Forgery
...
RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)
RSVP Invitation Online 1.0 - Cross-Site Request Forgery Update Admin...
EFS Easy Chat Server - (CSRF) Change Admin Pass Vulnerability
HTML !-- EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Version: 2.2 Date: Jan 11, 2007 Size:1519KB Download Easy Chat Server http://www.echatserver.com/ecssetup.exe By Mountassif Moad -- HEAD TITLEEFS Easy Chat Server XSRF Change Admin Pass Vulnerability/TITLE SCRIPT LANGUAGE=JavaScri...
sNews <= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- sNews = 1.5.30 unauthorized access / reset admin pass / cmd exec exploit by rgod dork: Barbecued by sNews mail: retrog at alice dot it site: http://retrogod.altervista.org...
aspWebLinks 2.0 - Remote SQL Injection / Admin Pass Change Exploit
No description provided by source. !-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION:...
w-CMS 2.0.1 - Multiple Vulnerabilities
+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...
w-CMS 2.01 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet...
osCommerce 2.2 - Cross-Site Request Forgery
Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass: -------crack.php------- Change Admin Pass...
osCommerce 2.2 - Cross-Site Request Forgery
osCommerce 2.2 - Cross-Site Request Forgery Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass...
Basic PHP Events Lister 2 Reset Admin Pass/Add Admin Vulns
Exploit for unknown platform in category web applications ========================================================== Basic PHP Events Lister 2 Reset Admin Pass/Add Admin Vulns ========================================================== @ Basic PHP Events Lister 2 Reset Admin Pass\ Add Admin Vul @...
Old Y article management system of the injection 0day-vulnerability warning-the black bar safety net
Magic springsB. S. N. hacking Defense Vulnerability rating: moderate Vulnerability description: The vulnerability appears in the js. asp, we first look at the source code. Code: If CheckStrRequest"ClassNo" "" then ClassNo = splitCheckStrRequest"ClassNo","|" 'Here is to get the variable using...
Mole Group Sky Hunter / Bus Ticket Scripts Password Changer
Mole Group Sky Hunter/Bus Ticket Scripts Change Ad...
Mole Group Sky Hunter/Bus Ticket Scripts Change Admin Pass Exploit
Exploit for unknown platform in category web applications ================================================================== Mole Group Sky Hunter/Bus Ticket Scripts Change Admin Pass Exploit ==================================================================...