Lucene search
+L

150 matches found

CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•15 views

PHPGurukul Online Banquet Booking System 安全漏洞

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the failure to strictly filter the adminname parameter in the /admin/admin-profile.php file. An attacker can exploit this...

5.4CVSS4.5AI score0.00326EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/21 12:00 a.m.•22 views

PT-2025-30350 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Time Table Generator System version 1.0 PHPGurukul Taxi Stand Management System version 1.0 Description: A problematic vulnerability exists due to cross site scripting. Manipulation of the adminname argument in the /admin/profile.p...

5.4CVSS4AI score0.00256EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•16 views

PHPGurukul Taxi Stand Management System 代码注入漏洞

Taxi Stand Management System is a cab stand management system. The Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the adminname parameter in the /admin/admin-profile.php file not effectively filtering user input. An attacker can exploit this...

5.4CVSS6.2AI score0.00249EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/21 12:00 a.m.•2 views

CVE-2025-7942: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be...

5.4CVSS3.8AI score0.00249EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/20 12:15 a.m.•14 views

CVE-2025-7858

A vulnerability classified as problematic has been found in PHPGurukul Apartment Visitors Management System 1.0. This affects an unknown part of the file /admin-profile.php of the component HTTP POST Request Handler. The manipulation of the argument adminname leads to cross site scripting. It is...

5.4CVSS3.9AI score0.00249EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/20 12:00 a.m.•17 views

PHPGurukul Apartment Visitors Management System 代码注入漏洞

PHPGurukul Apartment Visitors Management System is an apartment visitor management system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Apartment Visitors Management System, which originates from cross-site scripting due to improper handling of the...

5.4CVSS4.9AI score0.00249EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/20 12:00 a.m.•4 views

CVE-2025-7858: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PHPGurukul Apartment Visitors Management System 1.0. This affects an unknown part of the file /admin-profile.php of the component HTTP POST Request Handler. The manipulation of the argument adminname leads to cross site scripting. It is...

5.4CVSS4AI score0.00249EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/07 6:15 p.m.•12 views

CVE-2025-7138

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...

8.8CVSS5.8AI score0.0042EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be...

7.2CVSS5.4AI score0.00417EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/07/07 12:00 a.m.•22 views

The vulnerability of the adminprofile.php (/admin/adminprofile.php) script of the Employee Management System allows a hacker to execute arbitrary code.

The vulnerability of the adminprofile.php /admin/adminprofile.php script of the Employee Management System is related to the failure to eliminate special elements during the processing of the AdminName parameter. Exploiting this vulnerability allows an attacker operating remotely to execute...

6.5CVSS6.9AI score0.00417EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-7138: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...

8.8CVSS5.5AI score0.0042EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•14 views

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. SourceCodester Best Salon Management System version 1.0 suffers from an injection vulnerability that stems from improper handling of the parameter adminname in the file /panel/admin-profile.php,...

8.8CVSS7AI score0.0042EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•15 views

itsourcecode Employee Management System 安全漏洞

itsourcecode Employee Management System is an open source employee management system from itsourcecode. A security vulnerability exists in itsourcecode Employee Management System 1.0 and earlier versions, which stems from an improper handling of the parameter AdminName in the file...

7.2CVSS6.8AI score0.00417EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/06/28 12:00 a.m.•12 views

PT-2025-28161 · Itsourcecode · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Employee Management System versions up to 1.0 Description: A critical issue has been found in the itsourcecode Employee Management System. The problem affects some unknown functionality of the file /admin/adminprofile.php. The...

7.2CVSS7.9AI score0.00417EPSS
SaveExploits1References11
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•11 views

Directory Management System admin-profile.php File SQL Injection Vulnerability

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname in the file /admin/admin-profile.php. An attacker can...

8.8CVSS8.3AI score0.00397EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/20 11:15 a.m.•12 views

CVE-2025-6333

A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.7AI score0.00397EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•11 views

PHPGurukul Directory Management System 注入漏洞

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname in the file /admin/admin-profile.php. An attacker can...

8.8CVSS8.2AI score0.00397EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•2 views

CVE-2025-6333: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.5AI score0.00397EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/10 12:00 a.m.•44 views

Employee Record Management System /admin/adminprofile.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter AdminName in the file /admin/adminprofile.php. ...

8.8CVSS7.1AI score0.00397EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/07 12:00 a.m.•12 views

PHPGurukul Employee Record Management System 注入漏洞

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter AdminName in the file /admin/adminprofile.php. ...

8.8CVSS8.2AI score0.00397EPSS
SaveExploits1References6
Rows per page
Query Builder