CVE-2026-18896 lavkush-maurya Student-Registration-System changepass.php sql injection

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-18896: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

PT-2026-67936

Name of the Vulnerable Software and Affected Versions lavkush-maurya Student-Registration-System version 1.0 Description A remote SQL injection is possible through the manipulation of the oldpass variable within an unknown function of the '/student/changepass.php' endpoint. SQL injection is a...

CVE-2025-8502

The CVE-2025-8502 entry concerns code-projects Online Medicine Guide 1.0. Affected is an unknown function in the file /changepass.php where the ups parameter can be manipulated to cause SQL injection. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. The iss...

CVE-2025-8502 code-projects Online Medicine Guide changepass.php sql injection

A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the file /changepass.php. The manipulation of the argument ups leads to sql injection. The attack can be launched remotely. The exploit has be...

CVE-2025-8502: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the file /changepass.php. The manipulation of the argument ups leads to sql injection. The attack can be launched remotely. The exploit has be...

CVE-2020-15014

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

Cross site request forgery (csrf)

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

PT-2020-14119

Name of the Vulnerable Software and Affected Versions pramodmahato BlogCMS through 2019-12-31 Description The issue concerns a CSRF vulnerability in the admin/changepass.php endpoint. This allows for potential unauthorized password changes. Recommendations For pramodmahato BlogCMS through...

CVE-2020-15014: Cross-Site Request Forgery (CSRF)

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

teos-zz.ru XSS vulnerability

Vulnerable URL: https://teos-zz.ru/login/changepass.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3559623 Google Pagerank| 1 VIP website status:| No Check teos-zz.ru SSL...