21 matches found
CVE-2024-55270: Improper Neutralization of Special Elements used in an SQL Command
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
CVE-2025-14589: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executing a manipulation of the argument keyname can lead to sql injection. The attack may be performed from remote. The exploit has been made...
CVE-2025-27208: Improper Neutralization of Input During Web Page Generation
A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...
EUVD-2007-0365
Malware in sbrugna...
CVE-2025-7791: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated...
CVE-2025-6404: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2025-4241: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. Th...
CVE-2025-4213: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit...
CVE-2025-3240: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched...
CVE-2025-2058: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched...
PT-2025-10029
Name of the Vulnerable Software and Affected Versions PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description A critical vulnerability has been found in the PHPGurukul Emergency Ambulance Hiring Portal, affecting an unknown functionality of the file /admin/search.php. The manipulatio...
PT-2024-34504
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Marriage Registration System version 1.0 Description: A Cross Site Scripting XSS issue was found in the "/omrs/admin/search.php" API endpoint, which allows remote attackers to execute arbitrary code via the searchdata POST...
PT-2024-34486
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Marriage Registration System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the searchdata parameter in the "/omrs/admin/search.php" API endpoint. Recommendations: For...
CVE-2024-3091: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the...
CVE-2024-2778: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Online Marriage Registration System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched...
CVE-2024-2776: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Campcodes Online Marriage Registration System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2023-39551: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php...
CVE-2022-36715: Improper Neutralization of Special Elements used in an SQL Command
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...
PT-2022-23578
Name of the Vulnerable Software and Affected Versions Library Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter at the "/admin/search.php" API endpoint. Recommendations For Library Management...
CVE-2007-0477: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 aka Max Media Manager before 0.3.31-alpha-pr2, and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter in admin-search.php and 2...