PT-2026-104328

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/new announcement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

CVE-2025-12261: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

ShopBuilder module\adv\admin\adv. php, etc. 5 SQL injection

ShopBuilder description ShopBuilder is designed for large and medium-sized enterprises to develop the professional-level e-Commerce Mall system, powerful, safe and convenient, can carry tens of millions of views, make the enterprise low-cost to quickly build an online Mall, turn on the e-Commerce...

CVE-2012-4686

The provided connected sources confirm CVE-2012-4686 affects vBulletin 4.1.10, where an SQL injection flaw exists in announcement.php via the announcementid parameter. This allows remote attackers to execute arbitrary SQL commands, compromising data integrity and potentially confidentiality and a...

PT-2012-5551

Name of the Vulnerable Software and Affected Versions vBulletin version 4.1.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the announcementid parameter in the announcement.php file. Recommendations For version 4.1.10, consider restricting...

CVE-2012-4686: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter...

vBulletin 4.1.10 SQL Injection

Exploit Title : vBulletin 4.1.10 Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://vbulletin.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Powered By Vbulletin" Expl0iTs :...

CVE-2005-3022: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, 2 userid parameter to user.php, 3 calendar parameter to admincalendar.php, 4 cronid parameter to cronlog.php, 5...

CVE-2005-3023: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to 1 announcement.php, 2 admincalendar.php, 3 bbcode.php, 4 cronadmin.php, 5 email.php, 6 faq.php, 7 forum.php, 8 image.php, 9...

CVE-2005-3024: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...

CVE-2004-2511

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...