CVE-2025-11552: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might...

CVE-2025-5006: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/category.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2025-6144

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A problematic issue has been discovered, affecting an unknown function of the file /Admin/Category.php. The manipulation of the Desc argument leads to cross-site...

CVE-2025-1170: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/Category.php. The manipulation of the argument Desc leads to cross site scripting. It is possible to launch the attack remotely...

CVE-2024-13004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2008-2176

CVE-2008-2176 describes a cross-site scripting (XSS) vulnerability in the Zomplog web app. The affected component is the admin/category.php script in Zomplog 3.8.2, where an attacker can supply input via the catname parameter to inject arbitrary web script or HTML. The available records confirm t...

CVE-2008-2176: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter...