Lucene search
+L

17 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•4 views

CVE-2026-3164: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...

9.8CVSS5.6AI score0.00607EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/23 12:00 a.m.•6 views

CVE-2024-48704: Improper Neutralization of Input During Web Page Generation

Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes...

6.1CVSS5.8AI score0.00268EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/23 12:00 a.m.•73 views

CVE-2024-48704

The Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in the admin/contactus.php file. The root cause is a lack of effective filtering and escaping of user-supplied data within the pagedes parameter. An attacker can exploit this by injecting a carefully crafted payloa...

6.1CVSS6.7AI score0.00268EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/18 12:00 a.m.•4 views

CVE-2025-4874: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be launched remotely. The exploit ha...

9.8CVSS6.9AI score0.00577EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•6 views

CVE-2025-4765: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS6.9AI score0.00514EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•3 views

PT-2025-12699

Name of the Vulnerable Software and Affected Versions PHPGurukul Old Age Home Management System version 1.0 Description A critical issue has been found, affecting the /admin/contactus.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploited remotely...

9.8CVSS0.00473EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•6 views

PT-2025-12502

Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability has been found in PHPGurukul Art Gallery Management System. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation...

9.8CVSS0.00468EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/22 12:00 a.m.•7 views

CVE-2025-2627: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. This issue affects some unknown processing of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely...

9.8CVSS6.4AI score0.00468EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/03 1:15 p.m.•40 views

CVE-2025-1873

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...

9.8CVSS0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 12:51 p.m.•24 views

CVE-2025-1873 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...

9.3CVSS7.7AI score0.00421EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•6 views

CVE-2025-1873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•5 views

PT-2025-9322

Name of the Vulnerable Software and Affected Versions 101news versions 1.0 Description A SQL injection issue has been found, affecting the "pagetitle" and "pagedescription" parameters in the admin/contactus.php file. Recommendations For version 1.0, avoid using the pagetitle and pagedescription...

9.8CVSS0.00421EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/01/10 12:00 a.m.•6 views

PT-2025-3542

Name of the Vulnerable Software and Affected Versions PHPGurukul Land Record System version 1.0 Description A Cross Site Scripting XSS issue was found in the "/landrecordsys/admin/contactus.php" endpoint, allowing remote attackers to execute arbitrary code via the pagetitle parameter...

9.8CVSS0.01645EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•5 views

CVE-2024-13081: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Land Record System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/contactus.php. The manipulation of the argument Page Description leads to cross site scripting. The attack can be initiated remotely. The...

5.4CVSS3.9AI score0.0033EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•5 views

CVE-2024-2716: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/contactus.php. The manipulation of the argument email leads to cross site scripting. It is possible to initiate the attack remotely...

6.1CVSS4AI score0.00536EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/13 12:00 a.m.•4 views

CVE-2023-37746: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...

6.1CVSS6.5AI score0.00359EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/07/13 12:00 a.m.•21 views

CVE-2023-37746

A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...

5.8AI score0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder