Hospital Management System security vulnerabilities

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. A security vulnerability exists in Hospital Management System version v4, which stems from mishandling of the email parameter in admin-panel1.php, which may lead to SQL injection...

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

EUVD-2025-198036

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

CVE-2025-63512

The kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection within the admin-panel1.php file, specifically affecting the deleting doctor logic . The root cause is the application's failure to properly sanitize or parameterize user-supplied input from the demail parameter, which i...

h3Blog: Code injection vulnerabilities

h3blog is a light blogging system focusing on creation by H.C.Q individual developers. A code injection vulnerability exists in version 1.0 of h3blog, which stems from the incorrect operation of the parameter Title in the file /admin/cms/category/addtitle, and could lead to a cross-site scripting...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

EUVD-2025-131926

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

PT-2025-46672

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description An authentication bypass issue exists in CentralSquare Community Development 19.5.7, allowing unauthorized access to the admin panel without requiring administrative credentials. T...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CentralSquare Community Development has a security vulnerability

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7, which stems from an authentication bypass that could result in unauthorized acces...

CVE-2025-64281: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64281

An Authentication Bypass vulnerability exists in CentralSquare Community Development version 19.5.7 . The flaw allows an attacker to bypass normal authentication checks and gain unauthorized access to the admin panel without requiring valid administrative credentials. The underlying cause is clas...

CVE-2025-63420

CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions...

Exploit for CVE-2025-57310

CVE-2025-57310 A Cross-Site Request Forgery CSRF vulnerabil...

Exploit for SQL Injection in Puneethreddyhc Online_Shopping_System_Advanced

CVE-2025-51970 A Cross-Site Request Forgery CSRF vulnerabil...

EUVD-2025-38325

A stored cross-site scripting XSS vulnerability in the CrushFTP 11.3.750 Admin Panel Reports / 'Who Created Folder' allows authenticated attackers with permissions to create folders to inject malicious HTML/JavaScript...