PT-2025-11470

Name of the Vulnerable Software and Affected Versions Innovación y Cualificación Local Administration Plugin affected versions not specified Description The issue is related to a broken access control vulnerability in the Innovación y Cualificación local administration plugin, specifically in the...

CVE-2025-2199: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query in ‘searchActionsToUpdate’, ‘searchSpecialitiesPending’,...

CVE-2025-2387: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

PT-2025-11465

Name of the Vulnerable Software and Affected Versions Innovación y Cualificación Local Administration Plugin affected versions not specified Description The issue is related to a SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability...

PT-2025-9077

Name of the Vulnerable Software and Affected Versions The WHMPress - WHMCS Client Area plugin for WordPress versions up to, and including, 4.3-revision-3 Description The issue allows unauthorized modification of data, potentially leading to privilege escalation, due to a missing capability check ...

CVE-2025-1185

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-1185

CVE-2025-1185 affects pihome-shc PiHome 2.0. The vulnerability is a SQL injection in an unknown portion of the file /ajax.php?Ajax=GetModal_Sensor_Graph that can be triggered remotely. Multiple connected documents confirm the issue and link it to PiHome 2.0; one PT Security entry also provides a ...

CVE-2025-1184 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184

CVE-2025-1184 — pihome-shc PiHome 1.77 involves an SQL injection in the endpoint “/ajax.php?Ajax=GetModal_MQTTEdit” via the id parameter. Multiple connected sources confirm remote exploitation potential and public disclosure. The vulnerability affects an unknown functionality of that file, with C...

CVE-2025-1184 pihome-shc PiHome ajax.php sql injection

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModalMQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-1185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-0210: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

PT-2025-3782

Name of the Vulnerable Software and Affected Versions Campcodes School Faculty Scheduling System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the username argument leads to S...

CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

PT-2024-17300

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown part of the file /rental/ajax.php?action=delete tenant of the component POST Request Handler...