CVE-2025-11118

The CVE-2025-11118 entry affects CodeAstro Student Grading System 1.0. A flaw in handling the staffId parameter in /adminLogin.php allows SQL injection, with remote exploitation and public proof-of-concept exploits. Impact is indicated as high in multiple sources, including NVD metrics; exploitat...

CodeAstro Student Grading System SQL注入漏洞

CodeAstro Student Grading System is a student grading system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Student Grading System version 1.0, which stems from an incorrect manipulation of the parameter staffId in the file /adminLogin.php, which could lead to a SQL injection...

PT-2025-39789

Name of the Vulnerable Software and Affected Versions CodeAstro Student Grading System version 1.0 Description A flaw exists in the processing of the /adminLogin.php file within CodeAstro Student Grading System. Manipulation of the staffId argument can lead to a SQL injection. This issue is...

GHSA-Q82V-H4RQ-5C86 Rancher update on users can deny the service to the admin

Impact A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts. Specifically: - Username takeover: A user wit...

Rancher update on users can deny the service to the admin

Impact A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts. Specifically: - Username takeover: A user wit...

Hostel Management System login.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter email in the file /justines/admin/login.php. An attacker can use this...

CVE-2025-10796

A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could ...

CVE-2025-10834

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...

CVE-2025-10834

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...

PT-2025-39109

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal version 1.0 that allows for SQL injection. Manipulation of the user email parameter in the file /jobportal/admin/login.php can...

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which originates from a misuse of the parameter useremail in the file /jobportal/admin/login.php, which could lead to a...

CVE-2025-5948 Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claimbusiness AJAX action. This...

CVE-2025-57119

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

Online Library Management System adminlogin.php Component Elevation of Privilege Vulnerability

Online Library Management System is an online library management system. An elevation of privilege vulnerability exists in the Online Library Management System, which is caused by a flaw in the adminlogin.php component and the Login function, and can be exploited by an attacker to cause an...

CVE-2025-57119

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

CVE-2025-57119

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

CVE-2025-57119

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

CVE-2025-57119

CVE-2025-57119 affects Online Library Management System v3.0. The vulnerability is a privilege-escalation flaw in the adminlogin.php component via the Login() function. Impact is indicated as high (CVSS 9.8, CRITICAL). Remediation information present in connected documents suggests applying updat...

BIT-PRESTASHOP-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

CVE-2025-57815

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to...