Lucene search
+L

42 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 8:07 p.m.•17 views

CVE-2021-37807

An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /checkavailability.php endpoint that serves as a checker whether a new user's email is already exist within the database...

7.5CVSS8.2AI score0.01524EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/29 2:54 p.m.•24 views

CVE-2025-3973

A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /checkavailability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.4AI score0.00502EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/27 2:31 p.m.•88 views

CVE-2025-3973

The CVE-2025-3973 entry concerns PHPGurukul COVID19 Testing Management System 1.0. A vulnerable component is the /check_availability.php script, where the mobnumber parameter is susceptible to SQL injection. Attacks are described as executable remotely, with exploitation disclosed publicly. The c...

9.8CVSS7.5AI score0.00502EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/04/27 2:31 p.m.•61 views

CVE-2025-3973 PHPGurukul COVID19 Testing Management System check_availability.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /checkavailability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00502EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/27 12:00 a.m.•1 views

CVE-2025-3973: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /checkavailability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7AI score0.00502EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•5 views

CVE-2025-2373: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This vulnerability affects unknown code of the file /checkavailability.php. The manipulation of the argument mobnumber/employeeid leads to sql injection. The attack can be initiated...

8.8CVSS6.4AI score0.00446EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•2 views

CVE-2025-1901: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS6.9AI score0.00595EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•3 views

CVE-2024-53604: Improper Control of Generation of Code

A SQL Injection vulnerability was found in /covid-tms/checkavailability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter...

9.8CVSS6.5AI score0.01007EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/09/20 12:00 a.m.•14 views

Hospital Management System check_availability.php File SQL Injection Vulnerability

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the email parameter of the checkavailability.php file. An attacker can exploit this...

9.8CVSS8.2AI score0.01126EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/17 6:15 p.m.•36 views

CVE-2024-8944

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS0.01126EPSS
SaveExploits1References5
OSV
OSV
•added 2024/09/17 6:15 p.m.•19 views

CVE-2024-8944

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS5.7AI score0.01126EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/17 6:00 p.m.•80 views

CVE-2024-8944

CVE-2024-8944 affects code-projects Hospital Management System 1.0. The vulnerability is a SQL injection in the file check_availability.php caused by improper validation of the email parameter; exploitation is possible remotely over the network. Multiple connected sources corroborate this, with c...

9.8CVSS7.7AI score0.01126EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•2 views

CVE-2024-8944: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS6.9AI score0.01126EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/15 12:00 a.m.•4 views

CVE-2024-2482: Observable Response Discrepancy

A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /checkavailability.php of the component HTTP POST Request Handler. The manipulation of the argument oldpassword lea...

3.7CVSS4.9AI score0.00828EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/07 12:00 p.m.•57 views

CVE-2023-3534

SourceCodester Shopping Website 1.0 contains a SQL injection in the check_availability.php file, triggered by manipulating the email parameter. This vulnerability allows remote exploitation and has publicly disclosed exploits. Affected component: the function in check_availability.php; root cause...

7.5CVSS7.2AI score0.00597EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/07 12:00 a.m.•5 views

CVE-2023-3534: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

7.5CVSS6.5AI score0.00597EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•6 views

CVE-2023-1984: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/checkavailability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack c...

9.8CVSS5.5AI score0.00776EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/02/12 7:37 a.m.•44 views

CVE-2023-0785 SourceCodester Best Online News Portal check_availability.php information exposure

A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file checkavailability.php. The manipulation of the argument username leads to exposure of sensitive information through data querie...

3.7CVSS4.5AI score0.00851EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/12 12:00 a.m.•2 views

CVE-2023-0785: Exposure of Sensitive Information Through Data Queries

A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file checkavailability.php. The manipulation of the argument username leads to exposure of sensitive information through data querie...

3.7CVSS5AI score0.00851EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/27 12:00 a.m.•2 views

CVE-2021-37807: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /checkavailability.php endpoint that serves as a checker whether a new user's email is already exist within the database...

7.5CVSS5.8AI score0.01524EPSS
SaveExploits1References2
Rows per page
Query Builder