Lucene search
+L

3013 matches found

osv_cve
osv_cve
•added 2025/11/07 6:15 p.m.•21 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS6.1AI score0.00258EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•21 views

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

8.1AI score0.00258EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•15 views

SourceCodester PQMS security vulnerabilities

SourceCodester PQMS is an open source product quality management system from SourceCodester. A security vulnerability exists in SourceCodester PQMS version 1.0, which stems from improper cleanup of the appointmentID parameter in the apipatientschedule.php endpoint, which could lead to the executi...

6.5CVSS7.6AI score0.00258EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/10/14 6:44 a.m.•24 views

CVE-2025-11664

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.5AI score0.00455EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/13 6:02 a.m.•37 views

CVE-2025-11664

Campcodes Online Beauty Parlor Management System 1.0 is affected. The vulnerability is a SQL injection in the /admin/search-appointment.php file, caused by manipulation of the searchdata argument in an unknown function. It is a network-based issue (remote exploitation) with publicly disclosed exp...

9.8CVSS5.5AI score0.00455EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/13 6:02 a.m.•11 views

CVE-2025-11664 Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

5.8CVSS5.5AI score0.00455EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/13 6:02 a.m.•33 views

CVE-2025-11664 Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

5.8CVSS0.00455EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/13 12:00 a.m.•23 views

CampCodes Online Beauty Parlor Management System SQL Injection Vulnerability

CampCodes Online Beauty Parlor Management System is an online beauty parlor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Beauty Parlor Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata in...

9.8CVSS5.7AI score0.00455EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/10/13 12:00 a.m.•15 views

Beauty Parlour Management System new-appointment.php File SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/new-appointment.php. An attacker can...

9.8CVSS8.3AI score0.00478EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/13 12:00 a.m.•24 views

PT-2025-41758

Name of the Vulnerable Software and Affected Versions Campcodes Online Beauty Parlor Management System version 1.0 Description A security issue exists in Campcodes Online Beauty Parlor Management System version 1.0. Manipulation of the searchdata argument in an unknown function within the...

9.8CVSS5.5AI score0.00455EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
•added 2025/10/12 9:16 p.m.•31 views

CVE-2025-11614

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

9.8CVSS7.2AI score0.00415EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/11 9:30 p.m.•17 views

EUVD-2025-33876

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

7.5CVSS6.7AI score0.00415EPSS
SaveExploits1References6
NVD
NVD
•added 2025/10/11 9:15 p.m.•31 views

CVE-2025-11614

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

9.8CVSS0.00415EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/11 8:32 p.m.•11 views

CVE-2025-11614 SourceCodester Best Salon Management System edit-appointment.php sql injection

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

7.5CVSS7.1AI score0.00415EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/11 8:32 p.m.•50 views

CVE-2025-11614

SourceCodester Best Salon Management System 1.0 is affected by an SQL injection in /panel/edit-appointment.php via the editid parameter. The issue is exploitable remotely and is supported by publicly available exploits; multiple sources confirm impact on confidentiality, integrity, and availabili...

9.8CVSS7.1AI score0.00415EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•17 views

SourceCodester’s Best Salon Management System has a SQL injection vulnerability

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A SQL injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from incorrect manipulation of the parameter editid in the file...

9.8CVSS7.8AI score0.00415EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/10 1:31 a.m.•17 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/10 1:31 a.m.•18 views

CVE-2025-11505

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availab...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/08 10:15 p.m.•22 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.7AI score0.00417EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/08 10:15 p.m.•19 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS0.00417EPSS
SaveExploits1References5
Rows per page
Query Builder