Lucene search
+L

150 matches found

CNNVD
CNNVD
•added 2025/06/07 12:00 a.m.•12 views

PHPGurukul Employee Record Management System 注入漏洞

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter AdminName in the file /admin/adminprofile.php. ...

8.8CVSS8.2AI score0.00397EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/23 3:52 a.m.•17 views

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS6.2AI score0.00423EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:59 a.m.•15 views

CVE-2023-1397

A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS6.1AI score0.00562EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:37 p.m.•21 views

CVE-2022-27413

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...

9.8CVSS8.3AI score0.02955EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/05/13 12:00 a.m.•19 views

Company Visitor Management System /admin-profile.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System is vulnerable to a SQL injection vulnerability that originates from an incorrect manipulation of the parameter adminname in the file /admin-profile.php that results in SQL injection. No details of...

9.8CVSS8AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•14 views

PHPGurukul Company Visitor Management System SQL注入漏洞

Company Visitor Management System is a visitor management system. Company Visitor Management System is vulnerable to a SQL injection vulnerability that originates from an incorrect manipulation of the parameter adminname in the file /admin-profile.php that results in SQL injection. No details of...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•1 views

CVE-2025-4358: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument adminname/mobilenumber leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS6.9AI score0.00562EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/01 12:00 a.m.•2 views

CVE-2025-4153: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The...

9.8CVSS6.9AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•16 views

PHPGurukul Park Ticketing Management System 注入漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter adminname in the /profile.php file that results in SQL injection. No details of the...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/05/01 12:00 a.m.•14 views

PT-2025-18369 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A critical vulnerability was found in the PHPGurukul Park Ticketing Management System. The issue affects an unknown functionality of the file /profile.php, where the...

9.8CVSS7.7AI score0.00562EPSS
SaveExploits1References12
OSV
OSV
•added 2025/04/30 1:15 p.m.•17 views

CVE-2025-45007

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

4.8CVSS6.2AI score0.00315EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•3 views

CVE-2025-45007: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

4.8CVSS6.3AI score0.00315EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•15 views

PHPGurukul Timetable Generator System 安全漏洞

PHPGurukul Timetable Generator System is a timetable generator system from PHPGurukul. A security vulnerability exists in PHPGurukul Timetable Generator System v1.0, which stems from improper handling of the adminname parameter in the profile.php file, which could lead to a reflective cross-site...

4.8CVSS6AI score0.00315EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/30 12:00 a.m.•20 views

PT-2025-18272 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Timetable Generator System version 1.0 Description: A Reflected Cross-Site Scripting XSS issue was discovered in the profile.php file. This issue allows remote attackers to execute arbitrary JavaScript code via the adminname...

4.8CVSS6.2AI score0.00315EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/04/30 12:00 a.m.•35 views

CVE-2025-45007

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

0.00315EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•15 views

PHPGurukul Nipah virus Testing Management System SQL注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname/mobilenumber in file...

9.8CVSS8.2AI score0.00555EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•2 views

CVE-2025-4026: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument adminname/mobilenumber leads to sql injection. The attack may be initiat...

9.8CVSS7AI score0.00555EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•15 views

PHPGurukul Old Age Home Management System 注入漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Old Age Home Management System version 1.0, which stems from an incorrect manipulation of the parameter adminname that can lead to SQL injection...

9.8CVSS7AI score0.005EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•10 views

CVE-2025-3235: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname/contactnumber leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.4AI score0.005EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•15 views

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter...

8.8CVSS7AI score0.00446EPSS
SaveExploits1References6
Rows per page
Query Builder