Lucene search
+L

2131 matches found

Vulnrichment
Vulnrichment
added 2025/09/03 10:32 p.m.4 views

CVE-2025-9933 PHPGurukul Beauty Parlour Management System view-appointment.php sql injection

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has be...

7.5CVSS7AI score0.00409EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/03 10:32 p.m.15 views

CVE-2025-9933 PHPGurukul Beauty Parlour Management System view-appointment.php sql injection

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has be...

7.5CVSS0.00409EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/03 10:32 p.m.26 views

CVE-2025-9933

The CVE-2025-9933 issue affects PHPGurukul Beauty Parlour Management System 1.1, specifically the /admin/view-appointment.php viewid parameter. The connected documents describe a SQL injection vulnerability caused by improper handling of the viewid argument, enabling remote exploitation. Several ...

9.8CVSS7.2AI score0.00409EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/09/03 6:15 p.m.7 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

7.6CVSS0.00362EPSS
SaveExploits2References3
OSV
OSV
added 2025/09/03 6:15 p.m.8 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

7.6CVSS6AI score0.00362EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.14 views

PT-2025-35849

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A SQL injection issue exists in PHPGurukul Beauty Parlour Management System version 1.1 due to manipulation of the viewid argument in the /admin/view-appointment.php file...

7.5CVSS7.5AI score0.00409EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.13 views

PT-2025-35815

Name of the Vulnerable Software and Affected Versions: phpgurukul Doctor Appointment Management System version 1.0 Description: An authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is rendered without proper sanitization when a user visits the...

7.6CVSS6.4AI score0.00362EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2025/09/03 12:0 a.m.2 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

6.5AI score0.00362EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.7 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, no details of the vulnerability...

7.6CVSS6.2AI score0.00362EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2025/09/03 12:0 a.m.15 views

CVE-2025-45805

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment...

0.00362EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2025/08/20 8:2 a.m.3 views

CVE-2025-54040 WordPress Webba Booking <= 5.1.20 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through = 5.1.20...

6.5CVSS5.9AI score0.00357EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.8 views

PT-2025-34010 · Unknown · Webba Booking

Name of the Vulnerable Software and Affected Versions: Webba Booking versions through 5.1.20 Description: A missing authorization flaw exists in Webba Appointment Booking Webba Booking, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the moment,...

6.5CVSS6.1AI score0.00357EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/08/20 12:0 a.m.8 views

Beauty Parlour Management System book-appointment.php File SQL Injection Vulnerability

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in t...

9.8CVSS8.2AI score0.00403EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/08/19 12:0 a.m.11 views

Online Appointment Booking System 1.0 SQL Injection

A remote SQL injection vulnerability exists in Online Appointment Booking System version 1.0 Code‑Projects in the file /admin/adddoctor.php. The username parameter is not properly sanitized, allowing remote attackers to execute arbitrary SQL queries time‑based, error‑based, union‑based,...

9.8CVSS8.4AI score0.00396EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/08/17 9:24 a.m.13 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS7.7AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/15 9:15 a.m.10 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS0.00403EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/15 9:15 a.m.13 views

CVE-2025-9024

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits0References5
CVE
CVE
added 2025/08/15 9:2 a.m.37 views

CVE-2025-9024

CVE-2025-9024 affects PHPGurukul Beauty Parlour Management System v1.1, specifically the /book-appointment.php file. The vulnerability is an SQL injection in the Message parameter, exploitable remotely with a disclosed exploit. Multiple sources confirm impact to the database (data exposure/altera...

9.8CVSS7.6AI score0.00403EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/15 9:2 a.m.5 views

CVE-2025-9024 PHPGurukul Beauty Parlour Management System book-appointment.php sql injection

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.6AI score0.00403EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/08/15 9:2 a.m.17 views

CVE-2025-9024 PHPGurukul Beauty Parlour Management System book-appointment.php sql injection

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS0.00403EPSS
SaveExploits0References5
Rows per page
Query Builder