Lucene search
+L

322 matches found

CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•16 views

PHPGurukul Online Birth Certificate System 注入漏洞

Online Birth Certificate System is an online birth certificate system. The Online Birth Certificate System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /admin/search.php. An...

9.8CVSS7.8AI score0.00356EPSS
SaveExploits1References6
CNVD
CNVD
•added 2025/04/30 12:00 a.m.•34 views

Rail Pass Management System /admin/search-pass.php File SQL Injection Vulnerability

Rail Pass Management System is a rail pass management system. The Rail Pass Management System suffers from a SQL injection vulnerability that occurs when the searchdata parameter in the /admin/search-pass.php file is not properly filtered. An attacker can exploit this vulnerability to obtain...

9.8CVSS7.6AI score0.00562EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/28 10:15 p.m.•18 views

CVE-2025-4039

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•14 views

PHPGurukul Rail Pass Management System 安全漏洞

Rail Pass Management System is a rail pass management system. The Rail Pass Management System suffers from a SQL injection vulnerability that occurs when the searchdata parameter in the /admin/search-pass.php file is not properly filtered. An attacker can exploit this vulnerability to obtain...

9.8CVSS7.5AI score0.00562EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•6 views

CVE-2025-4039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/19 8:15 p.m.•19 views

CVE-2025-3819

A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/19 12:00 a.m.•11 views

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Men Salon Management System, which originates from a SQL injection due to incorrect manipulation of the searchdata parameter in the file...

9.8CVSS7.7AI score0.00562EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/19 12:00 a.m.•9 views

CVE-2025-3819: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be...

9.8CVSS6.9AI score0.00562EPSS
SaveExploits1References1
Hacker One
Hacker One
•added 2025/04/14 6:32 a.m.•30 views

Revive Adserver: Reflected Cross-Site Scripting (XSS) in Revive Adserver 5.5.2

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. This vulnerability allows an attacker to inject malicious JavaScript code into the application, which is then executed in the context of the victim's browser. The vulnerability is present in t...

6.3CVSS5.8AI score0.01469EPSS
SaveExploits1
CNVD
CNVD
•added 2025/04/09 12:00 a.m.•19 views

Online Fire Reporting System search.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacker can us...

9.8CVSS8.2AI score0.00562EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:28 p.m.•34 views

CVE-2025-32261

Cross-Site Request Forgery CSRF vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through = 1.1.1...

4.3CVSS7.2AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/06 11:15 a.m.•18 views

CVE-2025-3316

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS6.9AI score0.00555EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/06 12:00 a.m.•9 views

CVE-2025-3316: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS7AI score0.00555EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•13 views

CVE-2025-32261

Cross-Site Request Forgery CSRF vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through = 1.1.1...

4.3CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:59 p.m.•66 views

CVE-2025-32261

Technical details for CVE-2025-32261 are not provided in the connected documents. Public information in this set does not specify affected versions, impact, or fixes. Monitor for updates from Patchstack/NVD or vendor advisories.

4.3CVSS7.2AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/04 11:15 a.m.•14 views

CVE-2025-3240

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...

9.8CVSS5.7AI score0.00562EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•3 views

PT-2025-15015

Name of the Vulnerable Software and Affected Versions Advanced All in One Admin Search by WP Spotlight versions 1.1.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations For versions 1.1.1 and earlier, upda...

4.3CVSS0.00163EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•7 views

CVE-2025-32261: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through = 1.1.1...

4.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•15 views

WordPress plugin Advanced All in One Admin Search by WP Spotlight 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin Advanced All i...

4.3CVSS6.1AI score0.00163EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•17 views

PHPGurukul Curfew e-Pass Management System 安全漏洞

Curfew e-Pass Management System is an electronic pass management system. The Curfew e-Pass Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /admin/search-pass.php file parameter searchdata. An...

9.8CVSS8.2AI score0.00544EPSS
SaveExploits1References2
Rows per page
Query Builder