759 matches found
CVE-2026-5198: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...
CVE-2019-25488: Improper Neutralization of Special Elements used in an SQL Command
Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into the 'tur', 'id', and 'ozellikdil' parameters of the admin/index.php...
CVE-2026-3042: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...
CVE-2026-1688: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2023-53923: Missing Authorization
UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserController endpoint. Attackers can send a crafted POST request to /dist/admin/index.php with specific parameters to generate a new admin user with fu...
CVE-2025-14582: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is...
CVE-2025-14520: Improper Limitation of a Pathname to a Restricted Directory
A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. Impacted is an unknown function of the file /admin/index.php/datafile/delfile. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The...
CVE-2025-14519: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. This issue affects some unknown processing of the file /admin/index.php/advtext/add of the component advtext Module. The manipulation results in cross site scripting. The attack can be executed...
CVE-2025-14521: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The affected element is an unknown function of the file /admin/index.php/datafile/download. Such manipulation of the argument filename leads to path traversal. The attack may be performed fro...
CVE-2025-65380: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query...
CVE-2025-13561: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...
CVE-2025-63719: Improper Neutralization of Special Elements used in an SQL Command
Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username...
PT-2025-42436
Name of the Vulnerable Software and Affected Versions Sergestec Exito version 8.0 Description A stored Cross-Site Scripting XSS issue exists in Sergestec Exito version 8.0. The issue is due to insufficient validation of user-supplied data. A malicious user can exploit this by sending a POST reque...
EUVD-2012-1061
Malware in sbrugna...
EUVD-2006-2888
Malware in sbrugna...
EUVD-2019-5232
Malware in sbrugna...
EUVD-2008-6242
Malware in sbrugna...
EUVD-2012-3896
Malware in sbrugna...