Lucene search
+L

2216 matches found

NVD
NVD
added 2025/09/04 10:42 a.m.19 views

CVE-2025-9933

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has be...

9.8CVSS0.00444EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.10 views

PHPGurukul Beauty Parlour Management System SQL注入漏洞

PHPGurukul Beauty Parlour Management System is an application from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.1 of the PHPGurukul Beauty Parlour Management System, which stems from improper manipulation of the parameter viewid in the file /admin/view-appointment.php, which...

9.8CVSS7.7AI score0.00444EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/03 10:32 p.m.20 views

CVE-2025-9933 PHPGurukul Beauty Parlour Management System view-appointment.php sql injection

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has be...

7.5CVSS0.00444EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/03 10:32 p.m.4 views

CVE-2025-9933 PHPGurukul Beauty Parlour Management System view-appointment.php sql injection

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has be...

7.5CVSS7AI score0.00444EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/03 10:32 p.m.29 views

CVE-2025-9933

The CVE-2025-9933 issue affects PHPGurukul Beauty Parlour Management System 1.1, specifically the /admin/view-appointment.php viewid parameter. The connected documents describe a SQL injection vulnerability caused by improper handling of the viewid argument, enabling remote exploitation. Several ...

9.8CVSS7.2AI score0.00444EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/09/03 6:15 p.m.10 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

7.6CVSS6AI score0.00388EPSS
SaveExploits2References3
NVD
NVD
added 2025/09/03 6:15 p.m.9 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

7.6CVSS0.00388EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.8 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, no details of the vulnerability...

7.6CVSS6.2AI score0.00388EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.17 views

PT-2025-35849

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A SQL injection issue exists in PHPGurukul Beauty Parlour Management System version 1.1 due to manipulation of the viewid argument in the /admin/view-appointment.php file...

7.5CVSS7.5AI score0.00444EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.15 views

PT-2025-35815

Name of the Vulnerable Software and Affected Versions: phpgurukul Doctor Appointment Management System version 1.0 Description: An authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is rendered without proper sanitization when a user visits the...

7.6CVSS6.4AI score0.00388EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2025/09/03 12:0 a.m.19 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

0.00388EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2025/09/03 12:0 a.m.2 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

6.5AI score0.00388EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2025/08/20 8:2 a.m.4 views

CVE-2025-54040 WordPress Webba Booking <= 5.1.20 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through = 5.1.20...

6.5CVSS5.9AI score0.00357EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/20 12:0 a.m.8 views

Beauty Parlour Management System book-appointment.php File SQL Injection Vulnerability

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in t...

9.8CVSS8.2AI score0.00403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.10 views

PT-2025-34010 · Unknown · Webba Booking

Name of the Vulnerable Software and Affected Versions: Webba Booking versions through 5.1.20 Description: A missing authorization flaw exists in Webba Appointment Booking Webba Booking, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the moment,...

6.5CVSS6.1AI score0.00357EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/08/19 12:0 a.m.12 views

Online Appointment Booking System 1.0 SQL Injection

A remote SQL injection vulnerability exists in Online Appointment Booking System version 1.0 Code‑Projects in the file /admin/adddoctor.php. The username parameter is not properly sanitized, allowing remote attackers to execute arbitrary SQL queries time‑based, error‑based, union‑based,...

9.8CVSS8.4AI score0.00396EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/08/17 9:24 a.m.19 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS7.7AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/15 9:15 a.m.12 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS0.00403EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/15 9:15 a.m.18 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/08/15 9:2 a.m.6 views

CVE-2025-9024 PHPGurukul Beauty Parlour Management System book-appointment.php sql injection

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.6AI score0.00403EPSS
SaveExploits0References5
Rows per page
Query Builder