CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which originates from a SQL injection due to incorrect manipulation of the parameter appcontact in the file appsearch.php...

CVE-2023-41525

CVE-2023-41525 affects Hospital Management System v4, with a SQL injection in the Patient Search Module via the patient_contact parameter in patientsearch.php. The CVSS v3.1 vector shows Network access, no privileges, high impact on confidentiality, integrity, and availability (base score 9.8). S...

The vulnerability of the web_sys_infoContact_post() function in PLANET Technology’s microcontroller software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the websysinfoContactpost function in PLANET Technology’s microcontroller software stems from the operation of the function beyond the buffer boundaries in memory when processing the contact parameter. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2024-22492

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...

CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

CVE-2018-5074

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

CVE-2025-4934

A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Contact leads to sql injection. The attack can be initiated...

SourceCodester Contact Manager SQL注入漏洞

SourceCodester Contact Manager is an open source contact management system from Sourcecodester. A SQL injection vulnerability exists in SourceCodester Contact Manager version 1.0, which stems from an incorrect manipulation of the contact parameter that can lead to SQL injection...

PHPGurukul COVID 19 Testing Management System SQL注入漏洞

PHPGurukul COVID 19 Testing Management System is a COVID 19 Testing Management System from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul COVID 19 Testing Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code...

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH billing system project contains an administrator side. This PH Billing System project includes an administrator side where the...

CVE-2024-6216

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-users.php. The manipulation of the argument contact leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

PT-2024-37458 · Unknown · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Food Ordering Management System. The issue is related to an unknown function of the file add-users.php, wher...

PT-2024-35827 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A problematic issue was found in the submit extracurricular activity.php file, where the manipulation of the activity contact argument leads to cross-site scripting. The attack can ...

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from a SQL injection attack in the contact parameter of the admin/saveditt.php file...

PT-2024-25726 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the processing of the file admin/saveeditt.php, where the manipulation of the contact argument leads to sql injection. The attack can be initiated...

Customer Support System Cross-Site Scripting Vulnerability (CNVD-2024-14025)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...