17 matches found
CVE-2026-3164: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...
CVE-2024-48704: Improper Neutralization of Input During Web Page Generation
Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes...
CVE-2024-48704
The Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in the admin/contactus.php file. The root cause is a lack of effective filtering and escaping of user-supplied data within the pagedes parameter. An attacker can exploit this by injecting a carefully crafted payloa...
CVE-2025-4874: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be launched remotely. The exploit ha...
CVE-2025-4765: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
PT-2025-12699
Name of the Vulnerable Software and Affected Versions PHPGurukul Old Age Home Management System version 1.0 Description A critical issue has been found, affecting the /admin/contactus.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploited remotely...
PT-2025-12502
Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability has been found in PHPGurukul Art Gallery Management System. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation...
CVE-2025-2627: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely...
CVE-2025-1873
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2025-1873 SQL injection vulnerability in 101news
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2025-1873: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
PT-2025-9322
Name of the Vulnerable Software and Affected Versions 101news versions 1.0 Description A SQL injection issue has been found, affecting the "pagetitle" and "pagedescription" parameters in the admin/contactus.php file. Recommendations For version 1.0, avoid using the pagetitle and pagedescription...
PT-2025-3542
Name of the Vulnerable Software and Affected Versions PHPGurukul Land Record System version 1.0 Description A Cross Site Scripting XSS issue was found in the "/landrecordsys/admin/contactus.php" endpoint, allowing remote attackers to execute arbitrary code via the pagetitle parameter...
CVE-2024-13081: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Land Record System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/contactus.php. The manipulation of the argument Page Description leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2024-2716: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/contactus.php. The manipulation of the argument email leads to cross site scripting. It is possible to initiate the attack remotely...
CVE-2023-37746: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...
CVE-2023-37746
A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...