CVE-2025-57150

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting XSS in admin/subcategory.php via the categoryName parameter...

CVE-2025-57150

The CVE-2025-57150 entry affects the phpgurukul Complaint Management System in PHP 2.0, with vulnerability in the admin/subcategory.php file via the categoryName parameter that enables Cross-Site Scripting (XSS). Root cause per connected sources is insufficient filtering/escaping of user-supplied...

Apartment Visitors Management System category.php File Cross-Site Scripting Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter categoryname in the file...

CVE-2025-4505

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /category.php. The manipulation of the argument categoryname leads to sql injection. The attack can be launche...

PHPGurukul Apartment Visitors Management System 注入漏洞

PHPGurukul Apartment Visitors Management System is an apartment visitor management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Apartment Visitors Management System, which originates from a SQL injection due to incorrect manipulation of the categoryna...

CVE-2025-0400

A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/categories/update. The manipulation of the argument categoryName leads to cross site scripting. The attack may be initiated remotely. The exploi...

starsea-mall 安全漏洞

starsea-mall is a springboot +thymeleaf based Xiaomi mall management system by StarSea99 individual developer. A security vulnerability exists in starsea-mall version 1.0, which originates from the parameter categoryName in the file /admin/categories/update that can lead to cross-site scripting...